Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86l7W4_iCE6bGwUJ2_yHdURKyRw.cer
File: 86l7W4_iCE6bGwUJ2_yHdURKyRw.cer (raw, json)
Hash identifier: xiL/1nk+/QxRSAk31PKbqHPW1aMGruv+TvX2bsnh3VI=
Subject key identifier: F3:A9:7B:5B:8F:E2:08:4E:9B:1B:05:09:DB:FC:87:75:44:4A:C9:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB5441584992305DCE69CAA9A69770
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/07eae1-e859-461b-896e-1002bc03549b/1/86l7W4_iCE6bGwUJ2_yHdURKyRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/07eae1-e859-461b-896e-1002bc03549b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199457
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:54:41:58:49:92:30:5d:ce:69:ca:a9:a6:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3a97b5b8fe2084e9b1b0509dbfc8775444ac91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:a2:cb:80:22:a7:8c:1c:38:89:7f:0c:37:
58:d3:0a:a2:87:c6:9d:4d:c4:53:18:36:74:58:83:
cc:39:cf:4b:fc:c7:51:14:57:e8:48:ec:80:f8:cc:
78:5b:d4:f0:03:40:b5:71:67:c4:9d:30:a5:93:39:
00:e0:55:68:08:0a:db:8a:96:15:e6:75:1c:76:83:
a4:b6:81:af:50:96:3e:4f:4c:3e:7b:7a:ef:33:21:
17:ef:7a:89:36:cc:79:bc:5e:e2:dc:f6:37:72:a9:
5b:81:dd:1f:18:d2:55:16:5c:41:f8:5d:11:db:96:
fc:fd:99:9c:59:4d:b4:b9:ac:0f:a3:b6:f9:50:56:
93:e3:a8:0a:2c:e9:dc:27:0b:f9:6c:83:9e:f5:5f:
36:fc:04:ed:0f:61:72:fc:3b:21:37:96:54:1c:f9:
b9:09:78:53:b6:7d:4a:6f:01:c6:e6:c2:18:6a:fb:
c9:23:aa:4a:b2:d6:b4:e5:7e:bb:d6:f7:df:a0:d4:
65:32:a5:2e:e6:6e:1c:c2:8a:37:6c:f9:78:e0:7c:
d9:0a:40:8f:bf:69:00:84:34:0a:43:0b:ca:eb:c4:
a8:7f:ac:46:ac:55:2c:c7:17:43:bd:b8:64:9a:ec:
d4:67:1f:dc:d7:b5:90:88:aa:6f:5d:da:39:30:22:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:7B:5B:8F:E2:08:4E:9B:1B:05:09:DB:FC:87:75:44:4A:C9:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/07eae1-e859-461b-896e-1002bc03549b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/07eae1-e859-461b-896e-1002bc03549b/1/86l7W4_iCE6bGwUJ2_yHdURKyRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199457
Signature Algorithm: sha256WithRSAEncryption
41:f9:2e:92:40:e7:90:ee:98:d0:2e:d8:d6:2f:2b:a7:bd:24:
fe:76:1c:15:1a:6f:19:be:ba:64:aa:e4:75:c5:d2:8b:95:9b:
f0:10:3e:db:52:4d:70:58:ce:33:d2:e0:47:79:1a:bc:08:48:
4d:db:b9:10:c3:18:ed:09:a9:60:0b:f9:7d:72:5b:5b:f9:71:
70:2a:85:38:d2:de:1d:c1:95:70:bc:39:11:02:71:f8:3b:15:
25:95:e8:53:01:e9:3c:53:a8:76:40:4e:80:82:78:33:7d:b0:
9f:d4:a3:10:75:bb:4b:e7:22:15:98:cb:46:8b:5f:aa:86:9a:
a1:5c:2f:a6:3d:0d:22:de:59:40:7c:9d:6f:72:fc:b0:c5:75:
c5:28:eb:20:54:3b:94:89:b3:a9:68:83:51:7c:cd:86:bd:ee:
7c:17:85:21:46:1b:72:de:eb:89:7e:72:07:88:14:45:92:67:
20:4a:f3:3f:49:1e:e6:54:c3:d5:e9:df:0b:c4:1b:a1:66:a8:
c6:cb:cf:29:9d:6f:1f:1a:50:ce:a6:c7:69:c1:a4:3c:a4:60:
d5:0e:44:b9:eb:98:b1:0d:d7:74:c1:d0:11:c8:ca:af:3a:93:
52:09:b0:cc:47:e3:4d:14:1c:5e:f0:41:2f:5f:7b:89:ce:a3:
ef:35:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:23:37 2024 by rpki-client on console-ams.rpki-client.org