Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wCLT1QbI_rSTaFSxOnu5f5scl4Y.cer
File: wCLT1QbI_rSTaFSxOnu5f5scl4Y.cer (raw, json)
Hash identifier: qoGrA5LzLDK6bE1bG+Yee1HIM7ZqHyZlnrFXNnMoRKo=
Subject key identifier: C0:22:D3:D5:06:C8:FE:B4:93:68:54:B1:3A:7B:B9:7F:9B:1C:97:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B681EBF04D964FB051F169A60D8D54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48126
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:81:eb:f0:4d:96:4f:b0:51:f1:69:a6:0d:8d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c022d3d506c8feb4936854b13a7bb97f9b1c9786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:8b:61:06:f5:5c:36:71:c3:eb:26:f5:ba:
43:04:e6:a2:9c:1d:75:ef:4c:6b:f6:cb:fc:2c:c6:
70:58:72:2d:45:9d:9e:69:96:94:cd:8b:3c:06:f5:
99:7d:89:65:50:b8:66:51:1c:3b:0d:1a:e9:8f:3a:
92:2d:ad:24:25:16:ca:d5:f2:00:88:43:1e:96:9f:
b9:e0:20:e8:d1:1d:79:f5:ba:c4:5a:24:13:f6:f5:
19:4f:cd:71:32:75:d0:95:3a:f1:9f:43:93:31:45:
d9:de:97:1e:08:6f:95:d6:3a:82:71:6d:a5:0a:6d:
dd:d1:ff:7a:64:67:30:83:00:cf:36:93:2e:5c:84:
9b:0b:4c:55:7f:73:d4:5c:87:ea:11:a2:c1:73:50:
b4:2e:ff:ab:07:ee:4b:e1:f7:a1:d8:ba:01:80:8a:
dc:f5:2a:99:26:4d:d2:61:9b:96:2b:00:fe:ca:d8:
80:01:34:f2:25:df:02:43:d6:d3:0e:e5:d8:c4:cd:
76:3e:96:0e:9f:e5:6b:f8:63:c0:b2:ec:3f:7b:72:
cd:4d:3e:97:ac:0f:a9:30:18:41:5d:10:d9:f7:ea:
ee:3d:ad:a3:a3:d3:33:7b:12:67:7b:3e:23:5c:a0:
17:fe:63:1e:a9:2c:ff:c7:7d:a6:f1:80:78:19:82:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:D3:D5:06:C8:FE:B4:93:68:54:B1:3A:7B:B9:7F:9B:1C:97:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48126
Signature Algorithm: sha256WithRSAEncryption
3a:ab:0f:25:f0:af:42:f3:8d:29:7a:57:ab:ca:c2:53:a1:90:
3a:0f:9c:b3:2e:77:b3:7a:0e:4e:53:85:9b:2f:a5:30:05:01:
f2:28:ba:26:fa:6b:09:56:c2:b4:ec:b0:e4:cc:b9:38:66:ea:
22:47:ec:4a:52:72:33:4c:41:2a:32:0d:fd:4c:42:ba:b5:3f:
63:5d:4f:78:fd:93:64:eb:a9:fa:d9:66:e9:9a:da:1a:22:e7:
d6:cd:dc:fd:50:05:51:de:26:da:fc:3c:1e:a4:12:46:71:88:
a1:61:43:ab:c1:1d:1c:57:13:13:38:41:46:d6:5a:90:cf:75:
a9:65:cf:90:14:70:cd:a6:57:13:f4:75:25:f2:6f:db:73:50:
59:cf:63:9a:29:70:b1:83:37:de:30:d1:ca:cd:fe:ea:32:71:
09:9e:ce:9c:b4:cd:6d:0f:72:bd:b7:36:7c:90:4a:26:2a:e4:
f9:fd:6c:62:6b:59:72:b4:0f:16:a9:e4:24:3d:ce:fe:1d:ba:
28:e7:81:94:30:a5:9d:83:f1:ba:75:33:49:d2:05:d8:fe:c5:
37:be:30:0e:4b:e7:3e:3b:55:cc:76:32:ad:aa:8c:9f:2b:1c:
b3:74:87:d9:e4:da:6f:3b:25:be:68:e3:d1:57:44:12:7a:2e:
b2:12:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:07:10 2024 by rpki-client on console-ams.rpki-client.org