Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
File: 03o_Gc-XFmpEQiB-Em8qA7bL65g.cer (raw, json)
Hash identifier: ZOndzz91wpyEFNpc54YMmrflfieQXtvgOcGsDSX1R0g=
Subject key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB5776A184ACDA132EF7B027EF41CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204873
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:57:76:a1:84:ac:da:13:2e:f7:b0:27:ef:41:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:f7:df:50:74:92:ad:b6:6a:d1:dd:18:b8:
50:98:d6:d5:02:12:3b:3e:ad:cf:37:d8:42:2d:da:
e5:7a:8a:b5:3d:39:52:01:6a:1e:e5:de:de:eb:20:
15:3a:16:98:94:c5:ab:25:1c:81:f9:13:96:79:f8:
b3:93:88:c8:88:7f:af:92:72:5e:a8:a3:cc:94:a4:
22:d3:a6:cb:e5:62:52:e2:78:0e:65:7d:e2:f8:19:
0e:ec:ed:af:56:4a:4a:4e:0c:dc:76:7c:02:e8:3f:
d7:dc:fe:2b:b7:66:4e:c6:2e:20:1f:2f:85:c9:76:
14:9e:2d:b8:eb:7f:08:fc:63:10:3f:bc:79:02:98:
20:4a:e4:6a:bc:06:2b:7d:8a:6c:f9:64:fb:ca:7f:
16:ed:50:c4:e5:71:75:51:74:f3:25:c0:95:9a:97:
68:8f:e9:af:7a:92:bd:38:a1:4f:63:31:5c:33:5c:
7f:cc:aa:96:d5:c7:b6:d1:73:57:05:cb:da:8a:02:
26:3c:23:55:27:bc:6d:ae:2c:d1:3e:96:1f:6a:2c:
67:6f:a9:54:56:83:29:1d:ed:c3:1f:5c:1b:ce:10:
e2:91:ed:f3:63:4e:a7:1d:8b:f1:46:3b:8d:3a:55:
32:f6:b0:23:73:82:8c:fe:63:b3:bf:46:d6:c3:04:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204873
Signature Algorithm: sha256WithRSAEncryption
12:86:be:a7:86:d7:95:b9:12:ed:a0:2d:57:df:34:31:f2:63:
5f:df:c5:63:c4:62:5d:38:58:93:8b:4c:76:c1:8e:79:ee:10:
a7:9a:91:65:02:6b:40:95:93:a6:5d:46:d8:c2:fd:d7:f6:ec:
27:89:ed:08:3d:3a:34:88:c2:92:e4:41:a9:3a:8c:f9:24:e8:
c6:f3:54:55:88:bf:bc:09:57:48:da:6b:5e:b7:f5:4c:d8:07:
1f:05:a6:07:77:ce:8e:cd:97:51:af:14:cf:7a:8b:e6:63:c2:
51:0f:82:fd:81:85:e7:e6:c9:bb:69:35:0c:5d:68:41:44:5e:
d9:b1:10:54:4d:06:f4:3f:5b:a0:39:c6:35:1c:b7:85:6e:b6:
19:8b:83:77:06:b8:c8:cf:a2:98:68:8b:35:c4:fa:57:b7:98:
35:97:4e:a2:32:22:04:48:75:c7:0d:6e:7a:31:00:0d:ca:3f:
8c:ed:e5:2a:ff:f7:85:2a:99:b0:e9:07:e7:be:ba:bf:34:83:
fd:8a:65:b2:da:84:6b:1a:39:b9:4c:dd:9b:8f:7d:f8:bf:58:
d8:8f:50:01:b2:9c:a5:42:eb:15:d6:8c:37:85:b1:d6:22:4a:
b9:52:c3:e9:ab:52:66:c1:b6:5d:a7:91:b7:29:16:9e:f8:01:
40:79:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:48:35 2024 by rpki-client on console-fra.rpki-client.org