Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer
File: TYEGKSpQrK_qaBfLoczmd6J34OE.cer (raw, json)
Hash identifier: dXBZOka1ZIbalDM0WM5hPCF5wCE3EF8MueXil667MEI=
Subject key identifier: 4D:81:06:29:2A:50:AC:AF:EA:68:17:CB:A1:CC:E6:77:A2:77:E0:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FB0F8ACAE14B738D94073F9E8E3C55967
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 25 May 2024 18:17:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214871
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b0:f8:ac:ae:14:b7:38:d9:40:73:f9:e8:e3:c5:59:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 25 18:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d8106292a50acafea6817cba1cce677a277e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:cd:d0:4b:5c:e7:e1:b5:64:d4:5e:b3:81:
49:8e:08:78:88:97:3e:2e:3e:ed:06:58:09:55:30:
89:c4:d9:96:ba:88:54:7d:56:91:8e:64:7d:c5:79:
b7:b3:a0:fa:9f:85:27:d3:91:31:44:60:69:02:a4:
99:3d:f0:20:6a:2a:45:6c:40:39:25:67:00:c7:92:
27:a0:12:68:07:8a:61:38:c5:e8:14:48:8d:57:7c:
ce:65:ea:b6:88:59:00:99:cd:40:b9:e3:67:72:8e:
e1:3f:72:a0:29:72:61:dc:b0:d3:20:75:6b:e4:68:
81:0d:4d:31:ff:84:22:77:14:73:ab:0f:80:d9:ab:
ae:a7:da:1c:0e:1a:59:db:d7:eb:cf:90:7f:4c:28:
90:32:d7:38:0c:53:e9:b1:bc:4b:a4:a1:81:bc:c2:
e0:0e:f4:b8:0b:c0:2f:9c:38:98:3b:97:bd:82:48:
08:db:83:17:d6:60:c4:b7:1f:fe:fd:b8:b7:e1:34:
14:bd:f4:7a:7e:ae:32:f6:d8:38:68:da:d5:b5:6e:
99:a2:41:8b:de:7c:7d:51:30:48:d0:bc:b7:ec:4d:
b5:02:b9:9d:95:12:ce:ff:6d:2d:df:36:b2:09:f4:
7f:9e:11:c7:41:ed:f1:48:dd:6a:48:5a:dd:e4:8c:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:06:29:2A:50:AC:AF:EA:68:17:CB:A1:CC:E6:77:A2:77:E0:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214871
Signature Algorithm: sha256WithRSAEncryption
65:8d:f4:84:5f:93:3b:e0:e8:c4:9c:8d:3a:a7:6a:ce:ec:e9:
e5:43:6e:ba:c5:da:d5:32:09:08:ea:e2:0d:51:28:e5:74:3f:
0d:58:63:1a:57:9c:00:46:d2:d8:8c:c2:6a:e4:de:fd:2e:4b:
ae:3b:f6:db:11:bf:92:e5:41:56:81:f0:3d:63:5a:f7:d6:3c:
6d:c0:46:3d:de:e9:38:93:64:a9:bb:84:ba:5f:f7:e8:84:5b:
36:a5:1a:e1:74:ab:ae:b1:d3:6d:65:aa:45:4d:e2:90:a2:5b:
10:17:af:c2:e7:08:8d:c1:3e:a4:b5:28:49:78:11:1d:91:80:
b6:5f:6d:15:21:b4:cf:6f:b4:3b:e5:3e:ab:03:6b:07:2c:c6:
61:f4:7a:30:25:6c:cb:93:c3:d6:0d:62:ef:68:0b:18:00:a4:
c6:52:36:1c:55:33:cf:20:f3:41:48:38:37:13:98:c8:74:87:
df:32:e9:0c:11:04:80:4e:43:91:f3:a2:18:da:69:ea:dd:78:
0c:d6:d5:b2:51:c7:3b:75:16:42:87:53:e9:22:f6:56:f0:d0:
75:a6:57:28:d1:1c:c2:c4:e2:f3:5f:bc:e3:d7:76:5c:27:e9:
8a:e2:81:cc:a7:b6:4c:15:aa:0c:25:40:14:78:c1:2c:9c:f7:
fc:ea:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:39:03 2024 by rpki-client on console-ams.rpki-client.org