Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
File: y92Il7O48S4yaeHZHBXqtLNHkHA.cer (raw, json)
Hash identifier: vnOLPw7oPD/k6OD6Bq+0WIrV5o5UL6MqKLAsJ/7jxCo=
Subject key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80169ABC511CCED116C2A148DDE435E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201448
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:69:ab:c5:11:cc:ed:11:6c:2a:14:8d:de:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8a:c9:6b:c8:48:ac:c6:cf:df:ca:30:4b:96:
2b:2b:de:a5:0d:20:ab:3a:82:ac:a6:89:c2:50:e6:
21:63:28:c3:b8:0d:66:6c:92:f1:4a:7a:c0:3e:e8:
c8:da:c7:c8:f3:5f:ff:9c:2f:c5:c7:c9:ce:49:1d:
ab:96:e8:dd:28:dc:19:ad:ec:34:38:15:c3:54:6f:
a9:ad:df:83:6d:a6:ce:22:cd:f2:6c:21:39:32:2a:
4c:63:0b:42:14:8b:6f:41:a0:74:33:de:e6:6d:3a:
c1:69:44:2e:de:b5:3e:89:8b:87:b7:0f:8c:04:aa:
34:c0:7f:fc:42:91:71:16:0f:12:34:f0:ec:d1:e4:
be:80:ca:99:cf:16:ac:b6:71:5c:90:63:bf:d8:83:
e9:ae:b8:74:a0:21:71:10:50:cb:7c:75:9e:21:ce:
85:e7:70:b3:78:cb:79:88:ba:30:46:5b:69:cb:24:
63:48:88:09:28:e6:50:5e:34:f7:7b:e6:f2:33:e4:
5d:67:a7:8f:45:91:c3:0c:6e:90:01:5e:79:54:d7:
ea:29:86:6b:b1:fe:d6:c3:29:8f:87:27:a9:57:54:
35:84:c8:c9:82:15:5d:18:83:0c:f1:f0:93:c9:55:
9c:a9:c2:c3:f2:b0:6c:cb:62:59:79:55:94:96:a6:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201448
Signature Algorithm: sha256WithRSAEncryption
53:f1:d6:65:55:da:54:10:74:1d:4b:91:56:37:a0:0d:95:c0:
1b:a4:27:cd:9b:23:90:08:2a:2d:e7:ab:21:1c:4f:a1:90:04:
ab:15:32:5c:07:72:1b:0f:37:72:2e:04:85:3e:2a:06:00:87:
68:7a:d4:dd:af:1b:b8:9d:26:7c:11:ae:34:d5:1b:75:05:df:
22:3d:3b:1d:6c:c6:c0:17:f3:d2:b5:24:06:94:ae:ea:0f:36:
98:dd:6e:7f:e7:89:69:11:ef:6a:8c:43:5b:04:22:55:55:15:
43:a4:a5:7c:44:54:70:3b:a1:fc:5b:65:72:e4:4d:da:23:a3:
0f:82:b5:af:e4:7c:6e:cc:03:87:6a:e7:f5:16:f5:fc:94:8c:
3b:1b:fa:78:55:9f:fc:79:bd:8c:9f:aa:f7:ff:3d:d1:e0:71:
df:70:a3:61:c6:ef:a3:a8:df:32:44:5e:98:65:e9:c1:7e:10:
f0:2d:f4:ec:c9:c0:c8:78:3a:78:db:9f:7b:fe:4e:eb:19:e2:
61:1d:57:72:0b:ed:46:a6:f1:0f:a7:2d:20:3d:06:50:8a:a8:
d8:e1:7c:9c:a5:6e:1f:5f:e5:6a:73:3a:7b:ef:b9:f1:b5:8b:
58:6f:4b:de:f8:d9:33:de:dc:00:46:ee:0a:13:dc:03:98:e2:
f0:a1:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:26 2024 by rpki-client on console-fra.rpki-client.org