Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
File: vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer (raw, json)
Hash identifier: kMR+qZ+wxQGKg/hz/YAPPjPlUzYxmG6OiqQ36lleQew=
Subject key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6B17EDB4364F879F03CE77B572594
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44509
AS: 213344
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b1:7e:db:43:64:f8:79:f0:3c:e7:7b:57:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:ba:db:f4:b0:fc:be:2a:ac:e2:99:d2:6f:
02:d9:76:a7:ba:3f:a5:50:e6:b7:e9:f1:4e:20:cd:
5b:29:3a:d2:86:21:dd:cb:03:6b:ad:5b:19:1e:c7:
fe:2e:a5:ae:44:1c:7a:2b:9e:59:50:79:6c:3d:65:
f9:0c:ca:e3:25:a6:9c:32:20:1d:5f:9c:a1:d8:c6:
62:aa:6a:52:63:3c:cf:8e:a1:5a:ad:f8:4a:f4:44:
41:03:99:8b:89:73:5b:a9:91:a5:8a:6c:05:35:9f:
8b:73:53:97:40:c4:66:ef:61:5f:4c:b5:4c:30:b8:
ef:d5:50:fa:60:31:e8:37:89:a2:5d:b9:e6:6a:80:
ea:89:6e:c9:ed:00:ad:af:39:e8:64:55:dc:97:d1:
9a:7d:89:eb:4c:f0:a3:39:82:af:f3:b9:52:a8:f9:
cf:95:46:0e:c9:8e:d9:38:a6:f6:6d:04:8b:d5:04:
8a:1d:10:bd:8b:f0:d5:5c:6b:70:89:39:17:e3:04:
d7:d3:cc:12:58:b1:aa:8d:1b:78:8c:74:e0:29:21:
9c:7a:ed:e6:33:2c:4e:de:65:31:7a:45:0f:2e:da:
82:80:cd:20:d5:b6:e8:12:36:8e:aa:99:57:10:6f:
75:83:e8:e0:43:90:81:28:95:23:51:0d:b1:92:8b:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44509
213344
Signature Algorithm: sha256WithRSAEncryption
30:d7:d3:b5:d9:64:0f:97:97:d1:03:02:5f:f2:fb:f5:c6:8b:
c1:d5:fe:3f:69:fc:88:dd:ea:76:80:59:51:eb:c5:74:02:11:
df:e6:94:86:cb:f0:cc:e1:b5:56:81:3c:e1:93:0d:81:ef:46:
30:87:76:3e:fe:58:bb:c7:b8:f0:cc:6b:d1:f4:16:e1:06:17:
6f:3b:79:89:46:82:da:70:8d:b6:a3:6f:ca:d1:99:61:0a:b3:
f7:32:72:10:81:1b:bc:25:5b:79:bb:1d:78:a4:32:fa:0e:58:
6d:87:2c:06:d0:20:cc:47:c5:e5:5d:0b:e1:f6:79:74:b3:f7:
94:95:30:bb:a3:ae:b9:c3:06:91:95:46:5f:be:b1:ed:08:da:
0b:98:b6:1f:7a:45:df:4d:23:af:56:57:81:44:ff:9b:cd:89:
e3:a7:a5:61:c7:c4:d6:c0:e2:a3:23:bc:26:3f:20:36:ce:6a:
79:99:76:1b:e1:bd:3f:92:b1:ed:a8:1b:79:b6:e9:a6:f2:70:
09:6e:a6:c2:ad:73:96:5f:5d:16:94:ae:cd:f2:e2:7b:f7:a4:
ae:d0:ba:d9:6a:af:f0:d3:b9:76:22:71:c1:67:3e:ce:eb:db:
5e:ac:dd:4c:29:04:85:68:43:3c:d8:5a:b3:9c:78:92:77:1c:
b7:f9:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:18:48 2024 by rpki-client on console-ams.rpki-client.org