Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer
File: 5pgECu2WLzBoge6mVTBA-5ptNMk.cer (raw, json)
Hash identifier: wTdkKgKWSbYI23HprrN+S6NPBHMZ2ZfueTbBNn9zkM4=
Subject key identifier: E6:98:04:0A:ED:96:2F:30:68:81:EE:A6:55:30:40:FB:9A:6D:34:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F53C13082873559604413DF54735DFB5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 May 2024 15:52:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199297
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:c1:30:82:87:35:59:60:44:13:df:54:73:5d:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 7 15:52:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e698040aed962f306881eea6553040fb9a6d34c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:a3:7a:ff:09:20:89:e7:a0:3e:41:68:07:
ff:07:ac:6b:10:66:35:49:6a:4d:12:ab:09:d8:ce:
21:6b:02:4c:db:1a:ae:12:69:9e:8c:b8:69:29:50:
b7:8b:7a:b5:37:14:be:eb:68:1b:64:4b:af:f8:8a:
8e:54:33:be:1a:be:1f:04:6d:6a:b7:d4:b8:44:7e:
e3:f1:3e:1a:21:7e:ae:86:fb:d1:c7:4f:07:70:92:
c9:9f:07:a8:75:37:be:ef:6c:b1:2f:9a:b8:f5:6b:
a8:82:37:58:fe:89:2e:e0:56:6e:8d:09:f9:84:93:
6d:af:d2:c6:b4:6e:54:a3:be:37:06:61:57:a0:a2:
a4:1d:4d:51:5c:55:c3:f2:11:ab:cc:8b:42:75:79:
19:4f:49:90:bf:23:e1:9b:8c:63:7d:8f:a6:b3:1b:
5a:70:e1:03:86:44:9c:32:5a:8d:b1:48:2d:5a:cb:
ae:1b:34:65:43:ce:81:11:ea:f2:3d:95:9f:cb:dc:
20:84:c3:6e:f2:f7:d5:36:54:81:28:68:de:fa:c4:
45:b3:09:85:7c:81:27:a9:4c:e7:dd:17:2d:01:09:
ca:65:48:95:68:0c:84:f8:6b:f2:f7:04:69:47:5d:
44:26:bf:c9:3c:f4:d2:04:64:f0:cb:ba:02:34:7d:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:98:04:0A:ED:96:2F:30:68:81:EE:A6:55:30:40:FB:9A:6D:34:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199297
Signature Algorithm: sha256WithRSAEncryption
10:4a:b9:dd:d6:69:61:74:67:91:21:e2:7a:f6:7e:7f:3f:22:
c0:b9:48:6c:ba:9b:9d:34:56:39:4d:7c:25:e4:ab:6f:4e:9d:
7e:13:62:18:85:d2:8a:30:17:67:f1:1f:2e:84:1b:10:66:68:
08:ad:aa:10:0e:23:4b:48:04:cf:90:37:4c:cb:14:ae:b2:2b:
f8:6b:1e:01:e3:a7:91:a7:50:76:6a:66:c7:a2:66:13:16:8b:
0d:95:67:40:c7:24:e0:66:5d:c4:ec:c7:97:27:ad:69:23:4f:
89:0a:53:bd:80:47:6c:d6:af:55:08:7c:4a:09:67:d2:ca:66:
17:ae:5d:83:5e:33:94:62:70:ae:b7:e3:5a:45:fc:a5:d2:44:
ab:0e:7a:26:ae:b2:a1:23:8e:1e:b8:64:3e:24:53:ea:cf:88:
a1:40:42:ba:aa:26:f8:74:56:1c:a7:4f:ba:b1:47:bf:b0:ca:
00:ba:90:3b:6e:c7:cf:65:68:b8:bc:d1:fb:c2:1e:29:82:94:
d0:10:60:24:87:91:9d:a8:b6:dd:df:3f:22:22:9d:fc:3e:bd:
5d:c6:f7:ea:46:54:31:cc:d8:d0:61:fc:8f:33:3b:5e:20:ec:
84:6a:bb:55:92:9d:ab:a5:a7:5e:14:8e:31:fd:15:b3:9c:1e:
fa:27:aa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 03:07:03 2024 by rpki-client on console-ams.rpki-client.org