Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.cer (raw, json)
Hash identifier: /sDsAyJSutZVjt9Fp/8XZG8+nP54qqs99rSAOwljLSY=
Subject key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D577030C7A0E474EAD15A98FC1499
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210168
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:57:70:30:c7:a0:e4:74:ea:d1:5a:98:fc:14:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c46b44d7073324ab28416367de040f0e463348d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:3c:a3:a4:91:99:cc:96:ea:d8:e0:21:e5:
c8:c2:58:69:5c:90:2f:5d:d1:06:db:b4:73:68:15:
00:f5:25:3c:aa:79:41:30:1c:10:98:0b:4a:70:66:
a9:0a:4f:1f:52:ae:74:e0:b6:67:6f:d3:f3:87:14:
93:02:e0:f9:4a:81:7f:9a:3d:5c:0c:c9:5f:90:47:
03:2a:c6:2e:68:90:ea:23:02:9b:a1:e8:70:66:28:
07:46:da:fc:36:51:7b:c9:8e:2f:bd:fe:b3:6f:16:
a4:73:ef:c2:13:ad:79:ee:49:13:30:e9:52:f5:d6:
b2:fc:9e:5d:3b:13:f0:f3:43:3b:f6:4a:b6:5a:63:
97:b4:74:37:6b:7b:db:a2:40:72:b5:fa:e5:48:91:
37:23:56:f7:ef:7d:f0:63:b3:8b:bc:cf:92:ef:d6:
ba:54:7a:de:3e:4c:9c:3e:95:5f:0d:e3:7f:0e:71:
2e:0b:62:bf:b1:8c:c1:a6:15:70:c5:e3:f4:ca:da:
04:c3:e0:a2:65:3c:2b:e9:ea:43:05:a8:9e:32:cb:
95:b0:6a:0c:5c:26:29:fc:be:dd:53:1c:bb:c3:4f:
bb:b8:9c:14:78:d3:61:f1:d4:40:65:70:5c:cf:08:
8f:58:53:ee:17:c2:e2:a0:b2:32:4f:b5:a0:36:13:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210168
Signature Algorithm: sha256WithRSAEncryption
37:cd:c1:62:d0:0a:e4:a5:23:91:aa:eb:a7:5a:5e:f6:97:71:
02:69:49:91:bb:c3:36:f0:44:07:a3:dc:dc:a6:17:aa:a7:cb:
e0:df:45:7d:82:92:ef:3c:30:46:bf:09:cb:6a:e4:b9:cd:ee:
f6:62:a0:e7:7a:34:30:1f:91:33:20:01:c6:64:f7:3a:57:08:
8d:40:50:76:d6:f1:7f:e9:f9:f4:a1:c6:d0:8d:d5:54:37:b7:
16:ae:91:f4:20:87:f8:c6:78:54:26:6a:e9:ef:be:3b:37:cd:
5c:2f:9e:3f:ab:77:4b:77:95:70:6c:f1:45:a4:dc:c1:9f:06:
63:a9:8a:f6:a7:28:4e:dc:7f:1f:18:3d:06:8c:be:ad:8c:d7:
07:c6:0d:c1:83:df:46:d8:a2:5a:32:2a:88:8a:ab:fe:c6:05:
bd:c6:4b:4a:d5:96:81:8c:cc:94:e5:db:3a:94:22:d7:81:3e:
7f:65:0e:10:d2:aa:7f:54:d3:9b:5a:d7:0c:21:d8:f1:f2:d8:
2e:e2:2a:b0:e4:36:49:93:89:7c:06:dd:d6:28:a1:34:fa:41:
f6:fa:d4:12:a0:10:85:02:1c:d9:56:9e:42:dd:79:fc:46:51:
3e:19:20:2d:e7:b6:18:26:aa:8d:3f:9d:6e:80:52:4c:b1:7c:
25:5b:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:06:39 2024 by rpki-client on console-fra.rpki-client.org