Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w1Xn0zwNN6wjU60y4uN0lBpKdCc.cer
File: w1Xn0zwNN6wjU60y4uN0lBpKdCc.cer (raw, json)
Hash identifier: 2eBZKZ6aLLi+JxPRHUvfkzF3BHd7Z3lEyZVaBXOA5ds=
Subject key identifier: C3:55:E7:D3:3C:0D:37:AC:23:53:AD:32:E2:E3:74:94:1A:4A:74:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB48B377628840C3E283DF27FBE432
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/cd17ae-3bf7-4533-b56f-5b004ca75f8b/1/w1Xn0zwNN6wjU60y4uN0lBpKdCc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/cd17ae-3bf7-4533-b56f-5b004ca75f8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205240
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:48:b3:77:62:88:40:c3:e2:83:df:27:fb:e4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c355e7d33c0d37ac2353ad32e2e374941a4a7427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:a1:78:58:06:89:a8:d8:71:46:be:c2:30:
c4:ed:39:d0:de:6f:5a:a2:61:17:6d:b2:ed:98:91:
20:94:6e:77:83:b8:65:ff:18:22:c2:cf:c1:80:01:
1e:66:c0:80:ea:fd:27:18:f4:6a:02:1a:8a:80:4c:
ab:c5:8d:a3:75:43:6b:55:9b:b7:d0:02:cc:5a:eb:
93:76:16:0e:04:e1:1b:8e:7c:1f:14:51:a5:de:3d:
26:f2:05:64:cb:b6:a0:da:4b:e4:8a:be:a0:2b:92:
b9:ef:b5:f7:2f:15:d3:2c:8e:a8:e5:3b:b3:08:cb:
88:52:60:bb:f4:c0:ed:31:6e:61:af:78:e0:5a:84:
5a:12:98:19:f0:a4:fd:aa:e2:48:99:b7:39:67:b7:
a9:f6:fe:a3:b7:d5:c6:44:96:8c:d7:8d:3b:f8:1f:
37:86:0b:4d:97:dc:33:6b:05:83:cb:94:6d:9e:43:
ee:af:dd:22:cb:5b:a7:e2:75:bf:ba:78:6b:33:41:
bf:22:73:0f:ad:97:78:c5:a0:fc:8b:a5:f1:52:15:
7a:37:98:6b:38:7c:82:53:fe:c4:3a:20:ba:43:20:
c7:2d:a3:55:b6:f2:3d:b2:91:e2:d1:f1:42:4a:ff:
dc:74:8a:98:af:73:77:19:69:5f:6a:82:fc:46:0b:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:E7:D3:3C:0D:37:AC:23:53:AD:32:E2:E3:74:94:1A:4A:74:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cd17ae-3bf7-4533-b56f-5b004ca75f8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cd17ae-3bf7-4533-b56f-5b004ca75f8b/1/w1Xn0zwNN6wjU60y4uN0lBpKdCc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205240
Signature Algorithm: sha256WithRSAEncryption
45:f2:1d:ec:62:4d:fb:dd:94:ae:46:de:12:c4:b2:da:42:64:
94:ad:3c:28:96:c6:48:c5:a2:40:42:89:73:c0:11:19:97:6d:
4b:f6:fa:ab:9c:eb:ff:aa:16:a3:ed:79:b1:4f:32:e1:1b:be:
97:c8:07:91:2a:98:d4:ea:7e:de:dc:ed:fe:f2:24:e1:44:70:
17:d8:c8:15:a9:1a:c2:20:46:e8:72:54:f0:47:8b:99:a1:b0:
78:01:82:64:4d:a3:31:57:f0:31:cb:05:b3:02:52:72:2a:17:
49:aa:2f:34:11:03:d7:be:39:ae:92:e4:a8:03:f9:e9:ca:b1:
91:e3:0c:cf:9a:35:c9:92:12:3d:3f:f2:fb:75:52:7d:c3:e1:
72:8e:3f:1d:8a:ac:ce:43:c1:8f:4f:e7:5c:c8:cf:fc:7e:a8:
4e:ad:a3:ba:24:4e:06:4c:75:08:5a:34:fb:06:1b:46:8b:e9:
89:3b:26:b3:91:50:fb:23:f3:7a:f2:81:50:62:71:f9:07:cf:
17:fd:d3:f8:78:17:4b:d4:d4:14:6e:fa:35:3b:80:d5:dc:01:
6e:7c:d7:34:cf:bb:a0:4e:e1:6e:ae:32:e1:4e:87:15:ed:4f:
99:ff:1a:51:3e:d0:b6:08:c3:2e:05:9d:48:58:e9:af:01:37:
4a:09:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:24:46 2024 by rpki-client on console-fra.rpki-client.org