Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.cer (raw, json)
Hash identifier: JtibE5lEv/3I8Rt7+Sbd6gNfV/BEjiZDeIc1w8QvZ3E=
Subject key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D11F01318D6F410E9EF2AA96FFDC7D144
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jan 2024 11:02:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31553
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:f0:13:18:d6:f4:10:e9:ef:2a:a9:6f:fd:c7:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 16 11:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:ab:f7:ab:ae:33:85:0d:73:a7:4c:5c:0c:
8f:dc:60:cf:5e:91:28:f5:d3:b5:22:ec:f4:c9:84:
56:e5:85:3a:12:2f:e0:88:6d:0e:36:ca:57:9a:88:
0e:71:ab:99:39:75:44:e4:88:2f:55:da:ac:d0:6e:
64:5c:41:0f:d9:b9:85:e4:1c:ab:13:5e:25:ed:4e:
94:da:7c:8c:8c:49:ab:bd:60:51:da:ec:e9:2f:2d:
b4:3f:b0:e7:9a:b0:3d:7f:e7:1f:9a:3a:0f:18:6d:
8c:65:85:bc:c3:ce:2e:fa:4a:08:9d:96:de:20:3e:
3c:8d:b8:a3:b0:27:71:e5:53:c0:30:f3:9a:d4:bc:
ac:79:12:e2:a5:17:6d:7a:90:67:92:13:82:c5:f3:
9d:05:8b:06:98:4b:04:ff:38:eb:69:ed:18:7f:9d:
cd:be:17:64:27:6b:19:63:e6:4e:36:6e:40:29:fc:
32:e8:4c:d3:74:f5:01:4e:c5:74:d3:9c:cb:68:34:
c9:15:c6:fd:87:62:d8:0a:2a:99:99:d6:96:87:45:
71:da:0e:33:b3:3b:ce:b3:5f:5b:74:30:72:21:89:
d6:45:9e:eb:37:65:5f:5e:85:9c:c0:19:70:bd:ce:
24:0b:e0:37:4f:20:5b:93:02:bd:b5:55:ba:3e:d6:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31553
Signature Algorithm: sha256WithRSAEncryption
71:92:1e:25:b2:dd:9e:9c:4f:69:a5:50:42:a6:6b:6a:0d:34:
5d:bf:5e:28:78:9a:90:ed:77:ca:1a:94:42:11:ba:50:1b:fa:
21:6c:6f:00:8b:e8:0e:bc:16:c8:d2:69:ff:4b:68:fa:cb:03:
1a:59:32:e9:3a:49:50:93:bf:12:63:1d:48:0e:55:b3:8a:b9:
c3:47:13:d3:2b:c4:c0:b2:5d:6d:98:ac:3f:94:2f:95:8b:c5:
01:33:79:fd:ff:fb:f2:87:ee:e6:b2:c4:7f:9c:f4:2e:da:77:
86:11:67:9a:b6:4f:df:0a:5a:4a:e4:68:eb:c1:96:db:e5:59:
3f:89:6b:3c:e6:3f:ea:cb:70:96:5e:f9:e5:c4:d4:5d:38:6f:
47:b0:ef:7a:4e:eb:26:7b:0b:e5:e4:7d:4c:78:4e:28:c0:dc:
8a:5d:bd:bb:a5:b7:d9:85:3b:ca:6f:b7:2f:61:98:6e:d9:2f:
bd:85:8b:c6:f7:3d:8c:83:7d:62:bd:f3:da:5f:05:fb:2d:bb:
59:b3:59:fa:ff:a4:93:33:21:40:29:19:46:13:c8:f1:ab:8a:
0f:52:e5:10:7f:9c:52:d0:f8:d6:f3:4b:1c:b5:26:fc:78:ba:
15:a3:97:6f:d7:4e:8c:92:c4:90:f2:16:cd:f6:7c:4f:9f:d3:
ec:a8:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:37 2024 by rpki-client on console-ams.rpki-client.org