Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVV8l9e7_0fKIq1fufBYn6rxWb0.cer
File: xVV8l9e7_0fKIq1fufBYn6rxWb0.cer (raw, json)
Hash identifier: IyT7OD0/0gG5DZO+bRT0WwKvLpxsppZIuOEFIbqeSNg=
Subject key identifier: C5:55:7C:97:D7:BB:FF:47:CA:22:AD:5F:B9:F0:58:9F:AA:F1:59:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348C8196D7B11DD2A03DE87D9DA2CD8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213045
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c8:19:6d:7b:11:dd:2a:03:de:87:d9:da:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5557c97d7bbff47ca22ad5fb9f0589faaf159bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:d1:e1:f8:04:cd:a8:51:06:f2:b5:44:7a:
e7:eb:02:b5:18:96:4f:6d:20:3f:15:95:e7:6a:83:
57:eb:9e:34:45:cb:ed:dc:62:7a:78:c9:f2:83:b9:
08:ea:ae:12:83:aa:e0:b0:66:76:f1:59:44:8d:9b:
65:82:0b:ee:74:5d:1f:0b:1a:fe:c1:cf:f3:6d:51:
f9:5b:89:3e:e4:68:8e:26:8b:a2:30:77:21:d4:0a:
e1:cf:0e:56:7f:4d:63:45:1a:d5:ea:4e:02:89:b5:
80:aa:2d:26:52:12:59:ff:c2:ea:1b:d7:c4:24:e1:
1b:ad:ec:9c:4b:68:13:53:1f:eb:b0:d9:11:19:45:
e4:6d:a8:ac:d6:58:82:bf:df:3c:29:c9:02:4b:e9:
e6:f7:c7:70:de:10:20:e9:ef:31:2f:92:db:af:54:
4d:24:73:3b:a7:0b:3c:42:de:10:12:a0:cc:ce:a9:
5b:38:09:85:b7:33:1e:e6:83:41:b8:0e:4f:52:08:
df:54:b4:2a:a2:94:cc:86:70:a5:5c:2f:87:31:ae:
a7:0d:f1:0e:30:46:66:8a:3a:4d:c2:f2:43:5a:4f:
bf:c4:33:6d:f0:97:68:58:ef:c3:d5:70:80:b7:3f:
c5:a0:96:46:72:b6:a1:a0:ea:56:24:47:90:6a:3f:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:55:7C:97:D7:BB:FF:47:CA:22:AD:5F:B9:F0:58:9F:AA:F1:59:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213045
Signature Algorithm: sha256WithRSAEncryption
62:07:10:68:8e:c3:f9:83:b6:ec:77:82:40:6f:b4:69:d4:73:
1d:39:2a:db:82:d2:aa:68:29:01:aa:c6:59:97:1f:b6:b1:f1:
7c:c3:24:f4:37:02:dd:ea:19:f8:5f:f6:78:33:80:09:1b:11:
2e:10:4b:08:17:5a:16:5b:1f:0f:49:98:92:d4:65:cd:05:f6:
b5:7c:2e:25:54:18:be:12:ad:d0:a1:e6:0f:27:df:26:05:a1:
24:6f:ce:32:a3:e9:b4:97:8f:a6:aa:82:85:3a:0b:04:79:50:
9f:78:c6:9f:3f:b0:2b:d6:b2:44:b9:22:3d:7e:fb:31:25:53:
f0:1c:e8:2c:ba:59:e4:c1:0e:53:f8:aa:64:71:be:c0:c4:8c:
1f:f8:3c:0d:81:ee:1b:0c:8a:70:83:de:f2:f0:f3:df:33:0c:
ad:ac:5d:14:bd:7b:99:46:3f:d5:4e:c9:f5:b3:a0:38:53:f2:
d9:3b:a8:2f:75:df:96:9c:2d:f5:76:e1:06:90:25:89:32:8c:
05:1e:ae:e9:38:8d:3c:90:11:a3:fb:e0:2c:1f:a9:15:2c:5a:
ae:9d:40:1d:db:e0:fa:88:12:2f:2d:9b:96:41:cc:fc:bf:af:
f7:88:8d:b7:f3:0f:c1:3d:4c:c8:24:22:ea:0d:ac:12:83:16:
52:f4:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:44 2024 by rpki-client on console-ams.rpki-client.org