Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
File: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer (raw, json)
Hash identifier: Tpki30WJRzXk4FBNA7kJnVG8Wwbp2u4EZluaxOSGuqI=
Subject key identifier: C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE7379485801ACFD044AD64CB8A11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211134
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e7:37:94:85:80:1a:cf:d0:44:ad:64:cb:8a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c95998989fdb5a5f932147ad7162c63004e067a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:e7:a4:08:6a:cc:cb:9c:da:a7:18:a4:be:
26:1b:34:c7:bb:9d:d0:f1:4b:ff:55:b4:a4:9a:f9:
0e:91:fa:c3:1d:c2:b4:0f:98:d5:b4:44:ec:ff:ec:
8b:c4:cb:79:4b:5e:d4:94:cf:ca:19:a2:eb:b6:58:
90:5d:13:09:a9:8c:a6:7a:be:ad:1d:d7:5e:6c:cb:
5d:92:9d:e2:65:eb:f0:ec:ce:87:9f:69:ad:55:20:
b9:56:78:af:1f:58:0f:7d:34:42:7f:d7:c2:80:5a:
53:6e:62:e0:46:68:47:b2:9d:e2:17:3c:bc:cb:17:
e6:3e:88:fe:b6:b8:70:86:96:5c:41:9e:aa:96:78:
3c:5b:6f:2e:a1:3f:a6:36:e2:77:5e:4e:53:b7:26:
34:a2:9a:82:42:fb:b6:d7:48:69:cc:4f:7c:73:f2:
ce:23:b5:c7:3d:84:45:e0:34:85:3b:ae:e2:d9:96:
7a:1f:0a:76:16:4b:ac:13:74:aa:42:b4:78:3e:40:
77:08:a9:34:9d:d7:5a:b5:30:e5:1c:82:1b:cb:99:
92:f8:2b:c3:4d:c6:b1:5c:d1:62:2b:33:dd:96:00:
1a:6a:37:3c:12:e1:10:25:8a:a6:1c:40:64:bc:72:
7b:94:bd:4a:80:00:8e:54:b1:4b:da:81:68:74:20:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211134
Signature Algorithm: sha256WithRSAEncryption
29:8a:1f:59:97:d3:d3:a9:ba:53:13:ac:67:1d:35:13:31:1f:
60:80:52:41:bd:86:c5:e7:dd:5b:8b:25:d9:9a:c5:cf:c6:ae:
0a:53:28:75:04:e0:e4:ab:ea:8a:c0:ce:5d:8d:d1:41:04:0c:
be:76:20:1f:2e:6a:6f:c4:58:88:ce:7c:38:16:0c:04:bf:78:
ac:36:15:b7:fc:a0:45:b1:15:06:8a:ee:b0:b0:7b:84:5b:fb:
3a:41:7f:1d:08:3c:a2:30:62:f5:e0:3e:e2:03:10:88:f4:00:
e8:b1:28:21:58:99:8a:55:b8:59:a0:a9:6d:27:dd:c1:cb:e7:
a8:a9:ff:09:62:d4:a0:2a:74:32:f8:00:7f:54:7b:de:a4:d3:
0a:2b:6e:1b:11:5d:7c:40:a1:41:9e:0e:66:9c:76:d5:ed:97:
f6:f3:82:42:ec:fb:89:82:63:4d:ff:4d:62:01:dd:24:aa:ec:
69:0e:dc:b7:26:96:71:00:19:37:9e:2c:e0:01:db:2e:90:dd:
d9:7b:cb:67:9c:79:ea:b1:ea:cc:5d:12:ec:9e:41:9d:0d:eb:
8d:29:29:7c:36:b9:3c:e5:60:bf:d5:0c:d2:fb:e3:11:69:4f:
02:59:69:50:e9:c4:bd:c6:b6:0c:37:ef:48:44:e8:f4:4d:ac:
ab:db:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:20:06 2024 by rpki-client on console-ams.rpki-client.org