Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.cer
File: Ff2K1dRwC4Nmca1mEUZkzzMDt-8.cer (raw, json)
Hash identifier: nOFmFQcyL0SCtLWNcDg3fDr1DvvFIGp0urAQM5Hs5d0=
Subject key identifier: 15:FD:8A:D5:D4:70:0B:83:66:71:AD:66:11:46:64:CF:33:03:B7:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FC8F6A12D362F7D07960CC1CA5B44BF70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 May 2024 10:05:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34281
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:f6:a1:2d:36:2f:7d:07:96:0c:c1:ca:5b:44:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 30 10:05:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15fd8ad5d4700b836671ad66114664cf3303b7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:96:73:1b:2d:ea:2c:81:4d:0d:07:db:0c:
f0:6c:9f:c0:4e:ad:11:0d:93:07:f6:4a:c9:fc:85:
09:76:77:84:84:0c:9e:94:76:05:87:e1:c5:90:a9:
6e:0c:5b:5a:50:c9:1c:7a:7e:8c:66:44:4d:b0:b7:
2e:a3:61:7f:9b:d4:4a:d3:93:af:50:7d:ff:a7:c3:
a4:92:c3:cf:d1:e1:e3:e9:91:c4:44:a2:a8:63:3c:
93:4a:ff:8a:5b:24:e1:c1:0e:ce:64:a9:cf:a2:88:
6e:e7:c7:d4:b0:42:03:67:87:f0:8b:82:3d:f9:00:
92:b9:0e:1c:10:68:ac:13:9f:49:66:43:46:67:92:
8f:4d:1f:82:14:86:be:cb:56:86:05:a4:85:f9:a1:
03:35:80:fd:54:88:cf:9b:63:1a:15:7e:eb:8a:09:
1b:14:a8:8c:2e:a9:fc:57:26:cf:be:ab:95:d8:55:
e9:fc:df:40:dc:7d:00:bb:72:f1:41:2d:d2:32:5b:
28:8e:a5:a7:61:be:b0:9c:25:6c:53:43:6c:bd:98:
e2:ee:84:96:12:ca:25:9c:df:0f:e7:16:d0:07:d9:
13:e1:3d:b2:9c:a9:a7:69:06:59:72:b7:42:ed:86:
06:fe:16:f0:30:a2:e8:50:bb:ae:bd:45:90:a1:ee:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:8A:D5:D4:70:0B:83:66:71:AD:66:11:46:64:CF:33:03:B7:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34281
Signature Algorithm: sha256WithRSAEncryption
9e:37:57:44:17:48:0c:64:a3:87:f0:b1:f8:4d:38:2e:98:db:
d6:93:fe:df:49:7d:0f:8d:4e:2e:86:28:b0:85:25:fa:16:af:
69:45:a9:a6:77:60:b3:03:4b:82:a5:f5:d6:18:f9:18:79:86:
f8:8e:6d:2c:34:54:18:d4:05:08:c8:14:43:5c:4a:35:9a:14:
99:1a:7e:1a:dd:f6:5f:d4:8e:52:65:55:3e:98:98:86:3c:a9:
47:8a:20:ab:55:b7:2f:9f:54:0c:9e:ed:43:39:62:0e:00:85:
0f:22:d1:92:a0:64:40:56:49:fe:43:f8:71:aa:80:d6:39:69:
02:ef:8a:74:e2:d1:e7:f6:4d:60:e3:d9:58:4d:4d:57:4e:3c:
44:9f:32:53:3d:7e:8c:5e:93:ef:72:a5:fa:fb:de:ed:19:f7:
49:08:47:8a:86:80:10:91:14:2c:06:97:14:47:4c:13:ad:ad:
cf:95:43:e8:64:71:53:a0:75:3a:b0:c9:7e:d8:25:bf:26:5e:
a0:6b:8d:2f:b1:39:70:a6:d9:29:57:23:1c:b0:6a:7a:d5:80:
72:e0:b4:17:f6:72:81:bd:8c:af:5b:8f:18:00:bb:ae:22:f1:
9c:9f:5e:1d:ed:3d:61:22:cb:34:8c:e5:e2:8f:df:a8:8b:4a:
d0:e6:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 20:27:16 2024 by rpki-client on console-fra.rpki-client.org