Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v-4dgCvUqLC3Y4ia5eRjUt3fFTE.cer
File: v-4dgCvUqLC3Y4ia5eRjUt3fFTE.cer (raw, json)
Hash identifier: 5r1mtuj5SU6Jx0dfalxxC4vWOHgwThjWDSEx8dJiZ2Q=
Subject key identifier: BF:EE:1D:80:2B:D4:A8:B0:B7:63:88:9A:E5:E4:63:52:DD:DF:15:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF187A0545FE1728484603A0717530
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/b4ae4d-97ab-4536-8596-87c38664330d/1/v-4dgCvUqLC3Y4ia5eRjUt3fFTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/b4ae4d-97ab-4536-8596-87c38664330d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60439
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:18:7a:05:45:fe:17:28:48:46:03:a0:71:75:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfee1d802bd4a8b0b763889ae5e46352dddf1531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:b8:d9:fd:04:b6:64:91:11:a2:97:1b:ce:
3b:88:21:83:c4:81:e1:79:5f:0c:d9:a4:8c:ae:75:
67:72:a4:98:b6:84:c0:b9:f0:bc:87:3a:82:41:53:
7b:4e:4c:6d:d9:23:b2:66:c6:10:8c:34:a3:9d:ec:
f9:a0:6b:c5:de:d3:b6:76:5e:4e:ec:10:91:dc:8e:
cc:3b:e9:d3:c0:ae:19:f9:b8:8c:9e:21:03:7e:18:
cd:16:b7:af:e0:60:79:39:ab:b5:a3:53:f4:45:e7:
d4:49:96:10:63:cf:5c:e5:37:76:12:c4:e8:b7:3b:
9c:d5:48:30:bf:a1:17:44:9c:57:91:8c:af:a0:8e:
22:b6:37:4c:34:07:76:70:c7:00:b7:73:ba:43:f9:
52:ef:09:d8:8f:05:6d:e4:9f:e5:b5:04:1c:f0:33:
7d:ec:89:27:22:a2:83:36:2b:7b:5b:0a:93:75:b7:
3d:f1:b7:db:bc:fb:4e:b0:c9:1e:17:f9:f0:12:f3:
e5:05:d3:b2:5e:e8:85:74:e1:e0:60:2a:6d:10:26:
ba:b6:16:92:7f:e5:95:49:74:d1:d0:43:0e:89:2c:
24:c3:2a:69:c2:1a:9c:bb:48:99:dc:b3:b4:34:df:
bf:97:ce:02:f6:de:28:af:d4:8a:1a:68:41:92:05:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EE:1D:80:2B:D4:A8:B0:B7:63:88:9A:E5:E4:63:52:DD:DF:15:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4ae4d-97ab-4536-8596-87c38664330d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4ae4d-97ab-4536-8596-87c38664330d/1/v-4dgCvUqLC3Y4ia5eRjUt3fFTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60439
Signature Algorithm: sha256WithRSAEncryption
aa:5c:98:8d:28:52:74:2c:9c:e9:28:9d:b6:50:f2:00:a7:d6:
e9:c3:e3:91:0c:cd:a8:ac:3f:ca:32:42:7f:ea:c5:db:4b:ab:
e7:d9:da:bd:1f:94:e8:1e:e5:6b:e4:a3:06:29:5f:30:86:41:
82:bb:53:2b:49:87:7f:04:1d:14:2b:0e:ed:cb:49:9e:62:3b:
d5:2d:05:ab:c2:f3:5e:a8:7b:10:fb:37:45:b3:c0:27:86:c2:
2d:fd:0c:09:40:39:a0:93:82:02:68:0b:69:d5:8f:0e:18:06:
7d:cf:44:df:70:d6:91:f9:92:24:33:85:b9:ec:b6:02:0c:b1:
6a:c2:d4:68:fd:07:af:7a:0a:c0:39:b3:a7:4c:d7:e4:9b:e9:
46:19:11:0c:15:b1:c2:97:d8:99:79:47:a0:5d:d2:ab:97:90:
9d:82:c9:63:0e:29:d3:ef:52:3d:a7:e6:cd:2c:ba:40:88:79:
8d:89:fc:d8:96:88:36:a4:93:17:71:2a:b3:82:de:8b:61:89:
8c:b8:70:22:a1:ef:cc:c3:3a:b6:82:59:70:04:62:53:b8:48:
44:d1:f2:ab:53:5d:b2:33:ab:3e:0d:55:00:e6:a2:0e:2f:8e:
31:3e:0b:a9:ce:5a:cc:bc:3b:cf:07:eb:88:29:a0:c2:7d:38:
44:74:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:23:50 2024 by rpki-client on console-fra.rpki-client.org