Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer (raw, json)
Hash identifier: b0MeyTM+a1T8flBW/g3EY9YYQKkAkor7gIY9Qptnlh8=
Subject key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FE3D94C80E6BEA0F0EE020F9FAFEC242F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 04 Jun 2024 15:23:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214841
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:d9:4c:80:e6:be:a0:f0:ee:02:0f:9f:af:ec:24:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 15:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:bb:af:90:8f:43:76:5d:26:b9:55:2e:58:
07:35:20:ba:f1:83:4b:eb:53:04:8a:07:46:f6:f4:
12:82:78:51:2f:b4:48:7d:82:a4:f1:c6:f9:a5:67:
ae:4b:7d:61:f2:55:67:01:c0:78:b3:d9:5e:7f:39:
c5:f7:02:76:97:03:0f:76:73:77:60:8d:87:ac:83:
6e:7e:34:92:2d:c1:19:82:4c:28:2a:a2:67:88:42:
40:0f:93:55:0f:65:4b:37:9b:2d:f7:26:cf:eb:50:
86:2c:06:f7:f8:58:3a:5a:f7:82:fa:c1:ac:5f:04:
6f:dc:ae:f1:66:85:2e:0c:0f:c5:05:d2:7b:26:33:
2b:44:cc:8f:0b:31:85:ec:f5:b7:4e:d1:1d:83:c9:
70:9c:5b:aa:74:e4:bb:e1:25:02:3c:ac:19:67:51:
fe:c9:91:5c:82:38:f3:c2:93:e9:60:7b:f3:14:b7:
34:45:2a:cc:28:4d:c3:80:70:e6:4a:74:a8:a3:1e:
0a:3d:44:8c:a8:91:e5:62:1d:2b:78:cd:fa:52:ea:
e8:2d:d7:13:80:76:97:49:bd:0e:a9:7e:29:e1:fe:
a6:ee:61:38:8c:c5:0a:72:ab:89:d6:27:6b:90:e8:
87:db:3b:61:6b:1a:49:56:32:1f:5d:1f:ae:c9:3a:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214841
Signature Algorithm: sha256WithRSAEncryption
55:91:b3:43:fe:25:01:27:7f:6f:7a:3e:94:06:b6:bf:94:c8:
e8:a3:b7:8b:df:0a:6b:e2:51:fc:36:e1:9f:e0:72:95:a7:44:
03:c5:8d:ec:8f:54:cd:8e:aa:e2:48:9c:ee:b4:93:bb:4d:25:
f3:6a:7d:d1:d7:5c:f7:25:a8:23:e8:00:a1:58:92:f4:a4:21:
e1:67:be:86:1b:6e:a2:a9:21:a5:04:2c:29:42:37:62:bd:6d:
61:87:e4:38:1e:3e:d0:9f:27:13:3e:dc:bc:94:54:c9:74:fa:
db:f9:c2:19:20:a0:33:b5:00:3a:fe:b5:6b:ed:2b:5d:9f:92:
87:f9:b5:25:67:1f:bf:7a:cd:98:c3:bd:9a:8a:76:f3:71:fe:
8a:40:f4:f1:67:74:f7:29:d5:17:77:d1:b4:88:6d:d9:c5:5a:
3e:56:03:5b:ba:90:df:3e:1d:b1:d2:d6:08:62:b3:d6:94:cb:
5f:9b:97:bd:da:d5:18:fc:bf:2a:96:cf:f1:ec:d6:f4:0a:96:
f4:3a:17:3c:2a:58:7c:8a:f7:99:78:c4:ab:e4:7c:5b:f8:d2:
ca:6d:f9:4d:bf:99:17:cb:26:54:78:a1:c5:17:3e:88:ac:82:
93:7c:89:aa:5f:97:f8:02:0e:3d:46:6b:00:f2:89:55:52:1e:
4a:98:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 15:22:17 2024 by rpki-client on console-fra.rpki-client.org