Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.cer (raw, json)
Hash identifier: P50yepv7alyN07EZ+W6xg6crRVfhMaV+pcMud6+ssJg=
Subject key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349129E119BE0D6EA125A01ACCC5D4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 64406
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:12:9e:11:9b:e0:d6:ea:12:5a:01:ac:cc:5d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:56:1e:a6:78:dd:7a:e5:48:3c:02:42:f0:
6f:42:c6:cd:d8:47:ad:8a:87:f8:ca:19:9b:91:a6:
63:cf:eb:73:f7:53:23:82:21:ac:82:f1:48:43:5c:
47:3b:35:dc:e8:b1:fe:b5:a4:e0:09:5a:31:6b:fd:
47:4a:6a:c1:f4:a8:67:df:c3:88:b3:72:76:af:62:
0e:b3:0c:17:99:0c:bd:57:b4:59:35:50:ae:3e:18:
60:a4:d8:aa:9f:d3:a6:87:3e:c5:dd:d0:c7:46:f1:
b0:28:ca:98:7a:bb:40:d4:18:d0:89:a9:db:c2:c4:
f3:43:44:33:cf:12:4b:f0:9b:a4:a3:49:eb:f3:c1:
97:d5:ae:89:53:99:e3:74:c8:08:2b:33:18:3e:cb:
67:09:89:6a:34:ff:73:66:35:a0:eb:4a:59:cf:b1:
38:c5:64:a4:c7:21:47:75:40:5c:54:ea:1b:ec:4f:
a5:02:92:ff:7c:57:2d:54:7d:c5:28:1e:76:e0:bb:
88:cf:42:0a:14:23:94:16:41:0d:57:fb:d3:4f:40:
dd:d6:8d:c7:d3:55:fd:e6:32:70:ef:30:87:03:04:
27:62:d5:6d:a5:04:9c:22:1b:48:09:37:44:51:4a:
9b:37:78:89:e2:be:d0:ac:f5:35:a0:5e:94:40:79:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64406
Signature Algorithm: sha256WithRSAEncryption
4e:39:68:13:cb:2e:78:22:7d:18:1a:88:a7:ca:e9:53:31:4f:
c6:18:97:72:a3:74:0a:f7:e3:bb:09:f9:53:f8:6d:ea:f3:99:
a5:32:e1:95:b7:3b:3c:73:eb:ed:ad:1a:3b:cd:74:3f:94:54:
85:66:fa:5d:85:34:f9:f0:61:b4:8e:79:ff:97:d6:86:15:64:
d8:1c:b8:ee:2f:8a:9c:44:c4:ae:11:4e:b3:79:2c:4a:58:32:
32:34:23:e0:2d:02:3d:f3:c7:e9:1c:2f:50:95:80:c6:90:63:
ce:f2:3d:cb:76:42:70:ab:16:84:c8:e4:6d:1b:f4:4b:fe:3b:
45:ad:6c:fc:67:14:30:6e:d9:14:61:b5:c4:46:4d:ad:c1:45:
03:70:46:00:15:6d:29:ad:14:5d:71:d0:7e:28:53:e1:1a:1b:
b6:f9:0f:27:60:97:42:ed:e4:f2:7c:6d:4d:55:8d:9c:f5:e9:
90:dd:a1:fe:29:5d:6a:6c:0d:31:23:55:fa:00:98:4e:3f:e5:
8e:09:7f:78:bd:bf:e6:d4:25:04:07:6b:c3:28:8d:68:d4:7e:
49:bd:54:a9:05:f5:eb:16:61:0d:a8:dd:8b:78:e1:b0:04:7d:
bb:a5:66:af:47:5a:de:35:a4:0f:e8:8e:f3:c3:1d:e7:df:bb:
3d:7b:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:49 2024 by rpki-client on console-ams.rpki-client.org