Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.cer (raw, json)
Hash identifier: YHqfOrVd5JG3EknglfPN5slAE+j5CtAXg/Pusuj5rag=
Subject key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29C894C1309F4D291F4BB5567FCA94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216369
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c8:94:c1:30:9f:4d:29:1f:4b:b5:56:7f:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:4b:ee:be:12:2f:a4:09:04:f7:24:cb:f4:
c5:c1:50:a6:59:82:4f:96:ca:9e:04:05:88:9a:2d:
ee:39:ec:ba:78:3b:82:89:54:c2:85:85:a0:5c:ca:
30:a5:0b:6b:f6:96:62:d9:49:c5:80:c7:a1:f7:35:
a3:a1:ec:58:53:a0:e8:69:3a:92:8f:3b:c3:be:e5:
93:17:b4:3d:a1:9b:00:e4:b1:80:41:ce:5d:43:59:
5c:e6:52:70:91:f2:a6:d5:6b:01:de:92:37:bd:55:
eb:03:0c:c2:dc:0b:d4:a5:10:37:8d:fa:fc:bb:8d:
da:83:e6:e7:e7:2d:7d:5d:5b:e1:96:20:49:e5:07:
41:18:7a:92:84:fa:6d:79:36:8d:ef:b4:dc:b4:f4:
95:66:a6:e8:b7:41:f1:b4:08:66:49:74:b7:c3:1d:
62:a5:b5:86:ae:cb:b4:4c:ac:50:ca:64:e2:a1:fb:
b8:52:dc:4e:22:74:75:e7:41:81:0e:9b:68:b4:70:
e3:48:ba:f2:b9:cc:eb:0c:d8:5a:59:b7:e5:00:10:
f8:97:1d:2d:25:9f:57:d0:c1:aa:33:75:b7:80:06:
d1:6c:d6:38:d8:e6:6e:30:00:d7:85:7e:6f:38:4d:
9f:39:8e:fb:b9:a4:c5:4d:2b:15:4c:8a:dc:ea:fc:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216369
Signature Algorithm: sha256WithRSAEncryption
9b:a5:f0:97:2a:07:9e:99:66:81:22:ea:88:82:02:14:29:bd:
5e:17:49:e2:60:3a:a1:59:36:e8:94:b8:07:19:ba:8e:f0:e4:
37:18:44:92:64:59:27:e0:68:14:78:ee:48:11:64:47:17:76:
61:30:a4:40:1e:2f:65:63:9d:8e:e3:72:84:45:c3:5b:30:94:
ca:bd:78:bb:0a:ee:5d:21:2f:3e:0f:39:27:f4:96:69:ef:f8:
0e:9b:b8:15:71:f8:2e:cb:8d:ab:e8:89:ba:b3:5b:1e:f4:04:
99:3f:9c:2f:15:6d:fa:5c:60:e7:94:1e:b3:e6:a6:8f:a8:45:
f4:f2:1e:26:dd:38:47:b0:54:d6:e8:80:3b:18:a5:d0:cc:7c:
14:06:a5:ce:29:d9:ed:41:e8:53:1f:df:1d:cd:b1:6a:ce:df:
2d:d1:3f:c1:64:44:11:47:cb:4b:73:ac:12:f9:bc:39:bd:b5:
a9:9d:78:44:7d:4e:6e:45:94:f6:8e:2c:fc:96:91:b0:39:a3:
0b:dd:ea:0e:3b:d5:49:53:ef:a8:01:9b:c4:4e:08:3f:6a:8d:
90:64:cd:0b:c8:83:dd:e9:eb:4b:20:a1:35:9a:84:63:58:89:
f1:03:b6:b9:e6:b8:93:89:62:2a:7b:d0:4b:e6:5f:f0:28:4e:
39:11:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:28:11 2024 by rpki-client on console-ams.rpki-client.org