Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zSuhfHdNCbWHtxDdEyVgz0lin-g.cer
File: zSuhfHdNCbWHtxDdEyVgz0lin-g.cer (raw, json)
Hash identifier: YBXXxT+cgPyxNgv+3pM3rSs423r4ApULlRQA4aZdCmQ=
Subject key identifier: CD:2B:A1:7C:77:4D:09:B5:87:B7:10:DD:13:25:60:CF:49:62:9F:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500790F642A95FE78E89596068705B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/8c4245-fa2f-4254-9f4f-6d300d4006dc/1/zSuhfHdNCbWHtxDdEyVgz0lin-g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/8c4245-fa2f-4254-9f4f-6d300d4006dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48063
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:79:0f:64:2a:95:fe:78:e8:95:96:06:87:05:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd2ba17c774d09b587b710dd132560cf49629fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:85:5e:7c:e9:4b:0b:db:6e:15:31:86:3d:
11:aa:a5:52:1a:48:ff:2e:b2:be:27:91:dd:c6:12:
78:3c:90:e6:73:05:25:c7:13:3d:d9:4b:e4:20:78:
3d:4d:fd:c3:ff:b9:b3:f3:23:e7:d1:9c:9a:9b:bc:
c7:d7:c1:27:11:95:c8:9b:5e:2b:f9:5b:1e:ed:16:
af:13:81:9b:c9:c1:42:68:c1:0b:b8:53:c1:16:b1:
7a:92:e0:25:2a:e7:a8:3f:a1:3a:4e:7e:f9:de:26:
14:44:de:12:1e:40:5f:f8:cc:08:d1:98:76:5b:2b:
8f:8a:81:74:af:87:d6:95:06:f0:08:1f:a3:6b:c4:
b3:81:02:65:42:b5:bb:2e:12:f8:d1:d5:88:31:d5:
72:e1:96:d7:5e:42:09:77:d7:63:08:ea:f1:d8:15:
f7:34:d6:e9:f8:f7:8a:03:c0:0f:d8:04:aa:08:07:
b6:de:b6:2e:df:bb:c9:15:00:e5:a6:59:7e:98:d0:
cb:66:5c:7e:92:4d:fe:3e:dc:92:88:f6:f2:1b:cc:
68:6e:9d:71:ee:3b:77:e8:be:c8:f7:f9:1b:b8:ea:
55:1f:db:2f:42:cc:cc:ae:ca:9b:1b:8a:c2:0b:b1:
82:39:14:53:45:b8:b6:1d:e3:d8:33:71:f3:62:77:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:A1:7C:77:4D:09:B5:87:B7:10:DD:13:25:60:CF:49:62:9F:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c4245-fa2f-4254-9f4f-6d300d4006dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c4245-fa2f-4254-9f4f-6d300d4006dc/1/zSuhfHdNCbWHtxDdEyVgz0lin-g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48063
Signature Algorithm: sha256WithRSAEncryption
88:56:cd:33:a4:c8:3f:bb:b4:59:db:77:b9:d8:8e:78:c6:d7:
46:86:95:9c:a6:2f:99:ff:ac:a6:7c:c0:e2:ce:b1:ce:2f:8c:
7d:64:61:12:b4:a9:a1:7a:61:e0:69:88:21:8a:f1:39:42:84:
8c:92:35:42:c7:ec:5f:48:11:f6:a0:52:8c:3b:b8:2a:64:c7:
13:7d:dc:83:eb:48:b9:be:43:ce:7a:82:32:22:d7:bc:b7:68:
ff:26:14:69:59:0a:a8:ff:c5:01:58:74:7b:e6:ab:99:c7:d4:
28:39:06:e0:90:e1:40:c7:85:db:09:ad:27:a3:69:36:4e:be:
06:0a:c3:56:23:31:76:0d:f8:3c:49:23:3e:2b:c7:11:ce:5d:
79:84:8e:23:79:98:b5:08:fb:87:45:79:af:c4:da:b6:f5:03:
0b:27:06:b1:5c:f6:97:1f:59:e4:c7:e3:51:c2:93:b8:02:5b:
83:bd:f4:08:ec:36:d7:d4:89:bb:e9:bb:52:01:72:f5:be:d8:
8b:68:b2:e6:50:9a:41:8f:70:d0:2f:a1:d9:d1:5f:68:f5:c5:
a2:94:43:97:56:73:a2:1f:c7:47:90:ec:18:ef:c7:7c:d3:7f:
4b:b0:de:ed:73:30:47:32:65:25:b9:ad:6a:74:c9:2c:38:82:
b7:02:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:08:59 2024 by rpki-client on console-ams.rpki-client.org