Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer (raw, json)
Hash identifier: btiu3BOuQZh5HE8b2muvk1k97AfNJDmjudTyA93NyDE=
Subject key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F4ED7C8007D1221DC3B25EB0C083C9139
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 May 2024 16:58:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215096
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:d7:c8:00:7d:12:21:dc:3b:25:eb:0c:08:3c:91:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 16:58:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:25:45:68:11:fc:17:09:0e:8c:96:dd:1e:
ca:72:44:1e:27:04:7f:e9:03:56:46:14:c8:c7:69:
c5:23:4f:34:88:b3:23:f4:d9:65:89:53:4d:f3:73:
d0:8d:8e:23:e0:52:65:5e:ee:46:91:74:12:66:1d:
eb:18:ed:1d:72:1a:aa:8d:b7:8e:a5:1f:57:32:f4:
51:2c:de:e0:87:5e:eb:67:37:13:8f:a8:98:ff:0b:
13:2f:d6:e9:03:e3:ae:e1:76:fe:18:18:00:5b:1c:
48:17:ba:8b:dd:e9:2e:f5:46:36:4c:e7:af:95:9c:
70:56:f1:14:1b:ad:54:17:48:21:2f:88:6c:25:1b:
c6:ed:35:f3:9a:ee:53:36:34:a8:f0:5e:bc:11:84:
ba:41:d9:bd:1c:3c:26:e7:78:89:f1:bc:e6:c1:1f:
b3:db:4c:64:3e:b0:62:44:a8:6b:9f:00:11:77:be:
c0:7f:0b:46:fa:9d:83:92:4e:47:57:3d:de:5b:b0:
6a:e5:d6:9c:12:a2:7d:54:b0:00:23:5d:11:c6:02:
c5:7d:ea:49:ac:87:64:a8:37:cb:5a:92:53:f1:19:
29:a1:10:73:64:43:8b:77:6c:5f:78:d6:dd:e5:81:
82:58:2f:bc:83:e3:c1:b9:4b:b7:56:f2:fd:97:27:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215096
Signature Algorithm: sha256WithRSAEncryption
34:cc:7c:e3:42:ab:64:9f:df:63:01:7b:a7:c8:2f:58:49:0c:
53:b7:1c:36:4d:a6:a8:80:c5:20:36:e3:17:67:52:b0:bd:32:
84:b5:af:d3:91:2c:84:b5:f1:cb:08:c7:36:d5:ba:0b:4a:45:
e6:e0:05:92:80:37:fd:34:3c:e0:37:3b:a7:07:a7:67:16:2a:
3c:f5:df:f0:17:a1:6b:1b:9d:87:3f:96:5e:43:8e:a4:52:48:
18:6c:ec:67:86:3c:af:10:0a:b7:70:92:4d:ea:64:8f:00:8a:
ef:cf:00:7c:39:15:cb:f1:1f:ff:00:63:b8:7a:fb:22:c6:b3:
b3:04:d7:48:b1:9f:38:72:5a:3e:65:08:e0:ec:90:b9:ac:47:
f1:fd:36:e2:0a:79:91:7b:91:6b:a5:52:83:1b:51:14:47:fd:
79:4b:b4:66:8e:bd:bf:97:22:50:4c:b9:86:a1:3b:d3:6b:6a:
a2:bd:10:84:16:81:64:d3:d3:b3:92:ab:a9:a0:51:2a:e8:d4:
29:0b:38:32:89:a0:55:c2:a8:c1:63:dd:2b:9e:fe:91:85:30:
1c:2e:61:98:16:de:b6:3c:aa:59:70:12:1d:3e:8d:82:da:e0:
a2:1f:1b:0b:4f:22:f5:93:ce:6a:0a:df:aa:20:d5:35:47:44:
47:16:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:15:01 2024 by rpki-client on console-ams.rpki-client.org