Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zYP9Uu2CcPnzp3gYm5tpIl4kikU.cer
File: zYP9Uu2CcPnzp3gYm5tpIl4kikU.cer (raw, json)
Hash identifier: 2Zs4W2dySoNwTN+b/50GvdMVVOfLJmfC7dgRCmUkWjQ=
Subject key identifier: CD:83:FD:52:ED:82:70:F9:F3:A7:78:18:9B:9B:69:22:5E:24:8A:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801A07DAF12AFEC3CE9E07D9F437B33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211695
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a0:7d:af:12:af:ec:3c:e9:e0:7d:9f:43:7b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd83fd52ed8270f9f3a778189b9b69225e248a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:66:e1:ed:ec:1e:7f:0b:ad:11:e5:7c:7a:
b5:8e:5c:2b:cc:b6:d3:9b:71:66:96:09:1f:ba:db:
df:c4:b6:7c:70:ed:e4:86:9d:07:75:b9:5e:84:20:
cb:55:d6:1c:93:d2:ce:ff:0b:5d:ca:55:33:fa:97:
b0:b6:9d:14:79:4f:76:be:a0:b6:fa:be:51:0c:01:
02:9e:a1:f7:e0:23:12:7f:9a:d2:a1:23:99:d6:2b:
1c:9c:45:66:e2:aa:84:a9:16:76:5a:a9:29:50:08:
86:ac:30:d1:ed:df:6e:60:be:39:e2:99:90:71:56:
c8:08:e2:dc:06:71:2a:eb:f2:54:7d:a7:f0:d2:55:
63:a0:bb:30:eb:1d:a7:b3:0b:d9:6a:0c:95:94:e4:
f0:b0:d4:34:e2:4c:3b:aa:32:ee:94:c4:20:d2:a5:
17:d2:53:17:d0:78:05:42:b6:7b:c5:7b:a2:48:43:
70:8d:8b:d1:e9:4e:23:ec:e5:62:d5:dc:47:05:95:
42:09:38:64:c0:1f:7f:d1:fd:cc:d0:2b:7d:c8:35:
d5:bf:4a:ac:7e:6d:55:96:b4:87:3d:79:d8:d3:7a:
36:e8:34:ab:e2:ab:2e:50:d7:06:12:f4:c8:e0:3e:
dd:34:1e:a7:03:91:02:a7:8c:c1:0e:3e:a3:ea:09:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:FD:52:ED:82:70:F9:F3:A7:78:18:9B:9B:69:22:5E:24:8A:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/db922d-dbce-4be8-a9a9-26b6b8e49d5a/1/zYP9Uu2CcPnzp3gYm5tpIl4kikU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211695
Signature Algorithm: sha256WithRSAEncryption
a4:21:46:a2:43:13:84:0a:77:c7:2c:4c:90:40:ca:9f:a0:06:
c6:72:e0:21:f2:b1:32:15:27:ae:bc:fe:84:33:cb:a3:ad:8c:
e5:ce:22:b8:ac:0d:7e:c9:fc:9a:1a:94:8a:bc:5f:fd:22:19:
42:55:f3:94:b7:ea:4c:8e:a7:43:46:e9:a8:a8:d4:00:9f:06:
e4:7a:ba:6c:99:d9:d3:a3:8f:99:69:2a:1f:80:52:b1:c7:8d:
af:5a:6f:ae:82:8b:5d:e5:cf:25:cf:6e:42:92:86:42:ee:20:
78:08:dd:17:71:98:83:56:7c:de:09:86:20:98:dd:13:fa:1b:
02:58:aa:e8:39:da:a1:42:50:82:67:d5:c3:88:3a:b6:21:7d:
cf:62:6e:a8:ef:f9:3f:e4:20:76:13:8f:0d:ee:bc:67:89:87:
d6:a8:d2:8b:83:43:ba:07:a0:fd:ea:59:20:a8:cc:7f:db:47:
48:a0:dc:6b:d2:e7:88:37:c3:f4:d6:6b:71:6b:73:b0:06:a3:
30:d0:30:5d:05:8f:ae:bf:26:b4:18:e5:2a:16:a9:85:a5:19:
25:c9:23:9b:13:36:92:db:9a:6d:53:6e:b6:16:60:51:86:f5:
0d:8a:98:60:cd:c9:dd:6d:5c:c0:e7:3c:25:ff:da:00:3c:ed:
b7:04:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:36:24 2024 by rpki-client on console-ams.rpki-client.org