Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
File: THHp8j7qymjHIcvkKAYQC3XhV3A.cer (raw, json)
Hash identifier: okt4N6zeAKWR6gldjkTDrLYRePO7wq7Rs9QAvZbX5z0=
Subject key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F226B8FEB4267392663C8E3969BA06486
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 28 Apr 2024 01:57:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208768
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:6b:8f:eb:42:67:39:26:63:c8:e3:96:9b:a0:64:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 01:57:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b5:ea:be:ba:9d:28:06:d7:39:9c:ec:7e:06:
58:7d:bd:0d:84:3b:ae:e5:1e:ca:ea:70:ba:31:eb:
3b:dd:6e:1a:5b:ee:1f:c2:28:ae:7d:5e:43:ba:2b:
12:32:9b:ab:61:9e:33:79:d4:59:d0:c9:db:45:bb:
c4:20:0c:40:7a:f0:a6:13:f4:d8:88:85:31:35:b0:
ed:0f:5c:00:fe:2c:e6:0f:4c:29:b8:e3:2d:79:69:
b1:7f:51:8a:02:5e:77:0d:0d:f8:1e:43:c8:b4:9f:
cc:d8:ba:72:fe:50:23:f2:ec:0e:06:07:a7:90:12:
50:84:90:08:58:0d:38:92:53:44:ec:32:d6:4e:aa:
af:fe:92:c7:27:64:54:8f:76:98:f6:9d:f3:e9:b9:
dd:77:e5:9b:8f:39:2f:c0:f6:a5:48:90:40:ed:3b:
44:2d:8e:fb:95:9f:99:87:ab:81:b0:b1:93:65:d6:
b4:b7:ab:79:45:cc:de:de:b8:07:7f:8e:8d:4a:ef:
95:ca:b6:2c:38:b5:a4:ca:11:2f:48:3e:2d:4e:69:
52:ff:de:6a:92:6b:bb:ce:4f:13:2b:79:da:26:f9:
1a:28:14:5a:2f:fa:62:3b:f7:c5:9a:39:14:76:72:
4f:ab:97:bf:cc:22:92:f1:05:65:0e:05:36:c0:9c:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208768
Signature Algorithm: sha256WithRSAEncryption
60:d1:e6:c9:c2:f0:1b:6b:c4:c9:83:70:ce:f6:fc:61:e1:be:
0e:7f:b1:30:87:6b:c7:4d:82:51:3a:b7:6d:d4:6c:f2:4a:cd:
e3:cc:d8:65:03:7f:65:a9:b7:77:6a:ee:9f:6d:86:e5:c5:29:
b7:85:af:e4:97:9f:f1:a7:00:7a:0e:6f:04:be:ac:6a:da:90:
17:86:19:8b:fc:5c:c6:48:fc:06:3b:2e:ed:94:7b:33:d7:ba:
df:54:b9:29:7c:71:27:f3:a7:a3:fc:a8:00:5b:8a:a9:61:58:
17:12:7e:49:95:54:3c:73:3e:57:e5:ec:0c:22:65:f6:c1:66:
57:bb:30:26:fb:66:f4:4e:4e:a1:13:fa:77:fb:a8:4d:fe:3d:
f7:6f:0a:be:ab:c7:57:e5:5d:8a:56:16:0e:d8:4a:09:6f:de:
ed:0e:76:07:54:db:26:0c:a6:9e:26:74:91:8a:79:cf:da:93:
6b:b2:b1:12:3d:22:ac:b9:69:5a:0e:1e:4b:1d:1e:2f:f4:dc:
51:59:1d:17:39:b4:2f:20:72:45:b6:b2:0e:dc:82:3d:69:3b:
21:34:79:ee:bf:9b:25:8f:7e:8e:62:b9:f6:76:34:3a:f9:d2:
20:47:d9:47:c2:48:c6:3b:3d:0f:fa:e0:e1:ef:99:4a:6c:3f:
f6:7f:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 22:14:48 2024 by rpki-client on console-ams.rpki-client.org