Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FxHAKlngL3q0r78oi-a8DWo1Iyc.cer
File: FxHAKlngL3q0r78oi-a8DWo1Iyc.cer (raw, json)
Hash identifier: IJbq0Z5HEmn0x3p4SWnGWTS8fEPJcFjW4z6vHAAh7r0=
Subject key identifier: 17:11:C0:2A:59:E0:2F:7A:B4:AF:BF:28:8B:E6:BC:0D:6A:35:23:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7936564C8662B86D3BB4527F13C3149
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/bf9c22-a8fe-4890-8a49-02c8a6908a2a/1/FxHAKlngL3q0r78oi-a8DWo1Iyc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/bf9c22-a8fe-4890-8a49-02c8a6908a2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200172
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:65:64:c8:66:2b:86:d3:bb:45:27:f1:3c:31:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1711c02a59e02f7ab4afbf288be6bc0d6a352327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:6b:e8:7d:ae:da:4c:6b:4d:be:34:a9:88:
a2:ff:08:cd:e5:74:34:e7:5c:b0:44:b9:30:af:fc:
92:6b:78:7c:83:df:48:d4:51:91:7b:8a:0e:34:e8:
bd:70:70:9f:f0:c8:8e:cd:dd:3a:e2:ae:28:fd:29:
b8:83:11:f7:0c:fc:ab:d1:5b:f6:7e:bc:1a:e6:60:
5d:80:24:12:e1:67:69:f2:70:2f:98:35:3b:da:1e:
35:02:17:7a:9c:0d:55:70:a5:f7:ca:3b:27:91:28:
a9:c5:0c:10:86:82:b2:bf:83:33:b9:a0:85:67:13:
5f:22:7e:ee:05:93:30:70:91:20:3f:65:04:40:40:
78:bc:a1:be:22:f8:4b:42:0a:c9:69:1a:48:7d:d5:
b7:d1:2c:17:b6:9a:4f:55:3f:9b:58:ee:aa:7c:34:
ff:f9:23:ea:fd:63:7f:e7:34:47:d8:96:58:f8:08:
36:8f:70:a4:c6:c6:26:6e:81:17:c9:58:ad:c3:d0:
7b:b4:08:18:58:d4:a1:54:32:40:65:35:68:ee:c7:
51:06:0f:df:fb:a8:e0:1b:07:c4:57:9e:d2:7b:81:
f2:f6:4e:7f:63:36:da:94:3f:95:f0:38:73:cf:5b:
2f:35:26:9c:ae:01:48:7d:b8:a0:c3:1e:3c:85:5f:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:C0:2A:59:E0:2F:7A:B4:AF:BF:28:8B:E6:BC:0D:6A:35:23:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bf9c22-a8fe-4890-8a49-02c8a6908a2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bf9c22-a8fe-4890-8a49-02c8a6908a2a/1/FxHAKlngL3q0r78oi-a8DWo1Iyc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200172
Signature Algorithm: sha256WithRSAEncryption
a6:b6:07:09:86:a3:60:0f:d2:4a:fb:42:ac:d0:e1:1e:40:87:
6d:85:32:a5:b7:9e:0a:60:8b:c3:9e:b3:67:f3:21:ce:63:b7:
2e:7a:97:05:29:24:54:02:44:5e:4c:f3:8f:3c:3f:75:b4:71:
0f:2b:73:ee:cc:ca:78:b7:6b:bd:7f:18:a5:cb:d3:f6:aa:bc:
c1:61:5a:45:05:68:4c:05:75:7b:c8:9a:0b:9c:0d:37:09:0f:
38:c4:c2:b7:21:0f:bf:58:f1:c0:39:48:35:04:c6:6c:35:cc:
85:b7:29:59:67:2f:6b:9d:79:2b:ef:f0:82:4e:9c:ff:9e:a8:
63:5f:61:c1:92:94:d4:66:58:a0:51:52:01:83:b5:46:47:67:
14:8b:2b:fb:23:cf:92:e6:63:fd:63:4d:22:27:ec:cf:cd:0e:
57:88:36:d3:b6:1c:48:0b:f0:37:c3:e2:27:85:0f:91:60:1b:
f2:fd:8d:c2:58:99:73:d4:bf:25:6c:0f:3c:6c:9c:60:18:fe:
20:88:f9:ee:90:f9:3f:61:1a:45:f1:a3:a5:7a:21:9c:ca:a5:
ba:5f:f9:bf:fa:f8:6e:cc:fc:fa:db:45:5c:16:15:a2:29:bf:
3b:e2:bb:72:7c:fd:3b:0f:3a:0d:32:3a:c6:81:88:63:8d:d6:
92:e4:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 08:04:18 2024 by rpki-client on console-ams.rpki-client.org