Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer
File: 9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer (raw, json)
Hash identifier: 5MZ1JiStw+bR6tfCdbEeDlXCrbiv4voS3nMdHLm5C+s=
Subject key identifier: F4:C7:3A:7A:F7:AE:13:C3:8C:D1:F8:59:FB:7F:93:9D:14:57:48:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF798B1DB0B9C859AC05D886096789
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 2601
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:79:8b:1d:b0:b9:c8:59:ac:05:d8:86:09:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c73a7af7ae13c38cd1f859fb7f939d14574887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:c8:e5:79:9a:5e:67:64:90:03:6d:26:fc:
89:b7:ed:7d:b2:54:ef:a1:19:bb:1e:fe:81:a8:d1:
10:cf:e6:de:97:28:37:21:ef:4b:53:cc:63:71:ef:
ed:42:f5:ca:65:fc:0e:4b:be:d1:01:bd:0e:9a:e5:
0d:99:3c:3b:01:41:fc:64:38:c1:b5:6a:1e:b3:e5:
7a:2e:5a:a2:98:ea:05:b7:e3:07:20:10:79:e1:83:
e1:31:c9:8f:01:f4:bb:a8:c0:a3:5f:ef:71:87:8b:
b5:65:4d:4f:85:01:bc:db:ac:a0:cf:38:96:b8:47:
75:31:1c:31:66:6b:d3:79:2c:14:5c:d6:29:8f:42:
0e:cd:9f:35:64:6d:17:d6:d9:87:92:d9:d3:c4:fd:
d3:97:df:15:4d:fb:2d:0e:bf:dd:eb:d0:14:1d:f7:
78:0f:6e:11:78:41:aa:15:81:88:6c:b8:29:6b:47:
d1:ce:5f:d0:ec:45:41:94:2c:53:93:42:32:eb:0b:
46:a5:3e:7b:73:6d:ad:8b:4c:ea:36:1d:f1:fc:e9:
c0:10:d3:51:25:d9:52:ee:b0:db:28:ae:51:be:b2:
7c:c1:ec:1a:1d:00:ef:85:6d:0a:29:b0:0d:4f:fc:
df:65:dc:cd:00:45:9d:3f:aa:c9:38:0b:76:46:c6:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:3A:7A:F7:AE:13:C3:8C:D1:F8:59:FB:7F:93:9D:14:57:48:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2601
Signature Algorithm: sha256WithRSAEncryption
8b:1e:10:b1:de:27:11:d8:d9:ef:b5:7a:dc:83:ca:a8:c5:07:
40:0c:7d:49:34:ad:0a:6e:30:7c:0e:9f:43:80:0e:db:eb:54:
a9:16:c5:60:fb:f2:cd:dc:e9:c7:b5:37:8b:fa:25:61:56:10:
a7:26:91:7b:82:9a:7e:5c:dd:74:1a:85:15:4e:63:1a:2d:79:
80:65:21:aa:21:cd:79:67:56:3a:c6:59:2a:73:26:b0:57:37:
dd:31:75:74:0b:b1:1f:8f:cd:81:7e:fc:62:5c:94:98:a8:58:
8f:f5:fb:51:c5:25:dc:95:b9:d3:d6:17:fa:59:74:b9:31:11:
33:30:52:41:7e:f9:a4:22:b4:6f:6e:a2:df:d8:6b:4b:c0:cf:
89:4e:32:59:d0:64:7c:ff:21:c7:10:0b:67:17:83:3a:86:c4:
fc:70:97:09:40:25:19:87:24:fe:77:b7:eb:d0:87:47:a2:86:
39:85:15:2d:10:20:d0:47:67:ef:88:b8:2a:06:3a:29:00:e5:
e1:32:56:a1:50:28:7c:a3:31:11:bb:56:21:52:7b:c6:04:14:
f3:c3:d6:d2:a8:77:28:40:8a:4b:ed:5e:31:60:68:bb:99:e4:
1b:5a:38:4a:90:b5:ea:48:c2:44:6c:f4:59:29:d5:e9:99:e5:
08:35:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:12:57 2024 by rpki-client on console-ams.rpki-client.org