Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.cer (raw, json)
Hash identifier: yFvpvxVu815OzCK5UsgEhQYYSv1N8BCMuprMmVh7h4Q=
Subject key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DADDF55BCBB6DFAFF33E982CFCD9E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202752
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dd:f5:5b:cb:b6:df:af:f3:3e:98:2c:fc:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a0c67ff859f555af8921938887c6085269a402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:5e:c0:7c:16:46:32:74:73:6a:70:4d:f8:
0a:1a:49:5b:63:7e:07:b1:d7:27:b6:0e:15:24:aa:
7e:a0:ec:4b:ad:de:22:cd:72:33:93:73:31:2e:1e:
06:fb:8b:95:73:8c:c6:fa:a7:af:7a:6a:70:f0:ff:
01:64:11:28:4f:b5:e5:ce:e8:99:7b:a3:26:79:29:
60:80:99:4e:1d:31:ce:d7:9c:e5:f2:11:5e:41:10:
f2:b0:8f:4d:5b:39:31:9f:ad:8e:ab:b2:75:12:87:
34:83:b5:b3:95:98:44:a7:53:89:c6:65:80:d0:b3:
75:18:37:d3:13:df:ee:81:68:b5:7e:b1:80:7d:9a:
7d:49:30:12:8e:d9:f4:cf:4c:8e:29:dc:7f:c9:86:
7a:88:28:07:5a:4d:f0:a6:6e:53:bc:42:7f:ae:d1:
fe:4c:8a:2f:43:5d:2e:e0:18:c2:9b:b3:7d:f5:b3:
e0:f5:51:fa:54:12:94:9f:ce:5c:58:32:72:0d:18:
50:5d:7a:f0:7b:6f:2a:a7:cc:ef:a2:03:a6:50:a9:
f5:e4:b4:10:4d:b5:59:84:44:44:46:a7:3b:92:11:
78:4c:eb:b6:0d:67:1d:f0:ea:69:c9:36:06:b5:ac:
13:57:05:6d:a5:86:dc:9b:81:5f:ed:73:c3:17:93:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202752
Signature Algorithm: sha256WithRSAEncryption
00:6d:ab:54:ea:1a:47:a0:eb:f4:08:90:2e:a7:e6:88:f8:53:
84:a9:c7:f7:b3:e7:0b:66:90:3a:53:f6:75:d7:87:c7:81:9e:
b9:db:50:1d:c7:69:7f:58:0c:40:4e:2c:df:57:4a:a3:2d:52:
9e:b8:b9:d5:0a:74:41:41:84:d4:4e:b9:92:a3:85:e3:5f:ab:
35:c3:64:19:ba:db:08:04:cc:46:e0:20:3d:92:68:5b:0c:04:
04:fc:28:28:4f:80:0c:2c:05:45:d2:0d:f3:7b:87:c3:06:8d:
24:d5:bb:7f:d1:7f:d3:57:cd:3f:76:0c:7b:96:30:fd:10:4a:
b2:76:d4:c4:fb:cd:78:52:3a:71:05:64:31:a0:93:a7:06:72:
e8:05:57:52:9f:ea:77:3e:e4:af:49:ec:5f:55:10:34:d0:21:
9f:79:11:c1:94:f4:21:7f:2b:dd:74:c5:8e:1f:42:f3:f4:50:
04:e2:84:65:16:38:ab:8e:69:d1:3b:c5:3e:41:a6:a1:e6:1b:
d3:f9:49:24:28:bb:0c:72:fe:78:b0:ce:22:7a:f6:15:28:5f:
18:9a:46:04:3a:f2:51:f6:70:e4:9e:b4:45:40:ab:c9:4e:a8:
1c:fe:c5:eb:9f:85:52:17:86:dd:7e:24:cc:80:9d:04:a5:97:
f3:66:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org