Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xtAUTB5z3irxCab_ldDQl0s6ydg.cer
File: xtAUTB5z3irxCab_ldDQl0s6ydg.cer (raw, json)
Hash identifier: oPJuliQPADdQ1j8fcx3WfobHb46GeQt7WOG7xSYyggU=
Subject key identifier: C6:D0:14:4C:1E:73:DE:2A:F1:09:A6:FF:95:D0:D0:97:4B:3A:C9:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E111FB6B41788B6CBDB4CABDB2246E35C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Mar 2024 00:17:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215368
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:11:1f:b6:b4:17:88:b6:cb:db:4c:ab:db:22:46:e3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 00:17:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d0144c1e73de2af109a6ff95d0d0974b3ac9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:66:31:84:f9:fa:b1:4c:ba:e3:52:ba:e7:
73:be:04:f7:18:92:72:8c:a9:06:9e:ab:6c:7a:5b:
97:02:49:9f:0e:7d:6a:21:1e:4e:82:42:e1:1e:36:
8a:56:38:81:f6:59:96:4c:51:b4:66:d0:53:5c:1c:
a6:4f:2c:d1:bb:3e:00:0c:77:4d:14:e7:4a:0c:84:
d3:0f:23:86:d0:d0:73:4d:8c:17:03:b8:5d:12:33:
45:8e:e2:7d:ce:8b:00:dc:df:af:ba:ee:fb:da:34:
c4:3a:ee:3a:9e:38:5e:fd:f1:1e:fa:da:f1:95:2c:
0e:6b:ea:8b:e3:94:a4:bd:35:85:0f:89:5e:2a:72:
40:0e:ca:19:03:bd:fb:69:52:bd:6f:54:3f:8a:da:
20:ef:20:f8:9e:27:d9:33:6e:64:fe:5c:b9:a0:80:
4d:26:2b:b0:4f:1b:44:8a:e3:3e:64:43:93:99:19:
09:d1:3a:86:c4:72:23:6c:87:26:b2:e1:fe:86:a0:
9f:d2:e3:85:7f:7d:63:79:41:f9:e7:08:36:a1:98:
87:d0:0a:32:84:b6:b5:eb:82:fd:96:d6:b0:7c:a9:
88:b6:33:3d:af:69:e2:3c:54:3e:13:e5:89:57:36:
ab:4b:a9:54:6a:b2:85:51:10:23:d9:0c:a8:25:76:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:14:4C:1E:73:DE:2A:F1:09:A6:FF:95:D0:D0:97:4B:3A:C9:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215368
Signature Algorithm: sha256WithRSAEncryption
50:77:4d:64:b4:43:28:aa:e6:7c:a4:5d:60:16:0a:67:01:e1:
56:49:7d:04:53:ec:4d:90:ab:7a:bb:b3:9d:6d:c3:f4:c1:da:
d8:0f:6c:26:c4:c1:46:39:6b:06:8e:53:8c:2f:2c:0a:a3:ec:
ff:92:88:3b:5c:af:40:e4:6b:07:8a:5a:5c:48:f0:8a:71:2d:
db:2a:ae:9e:2b:82:ac:f6:33:e4:9c:44:e3:cf:26:ae:46:05:
7e:94:b1:54:d6:c0:e6:1b:f5:9d:5b:54:66:7d:c2:8c:a1:1b:
cd:3d:3f:ef:37:95:ed:69:63:73:76:78:7b:95:79:12:2b:0b:
39:b3:06:24:93:e7:94:98:33:ea:d2:d7:79:63:69:46:98:67:
49:fa:e7:e8:fd:4e:a7:18:f2:c7:dd:cd:2b:57:0d:05:32:09:
b7:f4:ba:14:8d:6e:19:25:91:ee:30:0a:0f:35:b3:f2:c2:79:
92:67:b4:9c:f3:31:1f:95:63:35:a8:cd:71:97:33:5f:35:fe:
6d:da:c4:44:17:25:76:62:f7:1e:cd:62:b6:bd:7a:6b:29:41:
c2:9f:93:40:25:b8:86:4f:34:44:e0:2d:f5:f8:d3:d1:58:be:
97:5c:db:98:91:ac:91:fa:91:8e:b4:e5:85:21:46:61:71:25:
9a:c0:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:07:15 2024 by rpki-client on console-fra.rpki-client.org