Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5SZPG7j7fK7FmpcMNMu0cXitaJI.cer
File: 5SZPG7j7fK7FmpcMNMu0cXitaJI.cer (raw, json)
Hash identifier: FU9akmOQWq/GVrevi2SaR0NBowRNHKo8DFAQ2vqXFJY=
Subject key identifier: E5:26:4F:1B:B8:FB:7C:AE:C5:9A:97:0C:34:CB:B4:71:78:AD:68:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019091C34C059BB32F130B0499A211215272
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/E5264F1BB8FB7CAEC59A970C34CBB47178AD6892.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 08 Jul 2024 09:53:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215778
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:c3:4c:05:9b:b3:2f:13:0b:04:99:a2:11:21:52:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 8 09:53:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5264f1bb8fb7caec59a970c34cbb47178ad6892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:cd:60:6a:e4:37:62:77:d6:cb:9c:55:39:
cf:e5:e7:a1:37:91:01:52:e9:34:f5:cc:cd:11:36:
a5:43:51:19:c2:f1:cb:c6:f3:30:df:c1:25:61:4a:
df:bf:16:15:e4:83:48:f2:1a:b1:6d:f3:19:f0:a0:
01:0d:1c:ac:83:55:be:c6:da:97:69:48:61:54:c0:
fe:11:55:24:01:65:a9:68:11:26:da:3d:c8:1b:c6:
e9:2d:05:92:85:22:43:d1:be:06:96:61:78:53:79:
9c:95:9a:6d:94:7c:e4:16:ef:6a:53:fb:aa:87:5a:
f5:f8:83:d8:53:fe:18:f6:14:36:5f:01:63:7b:06:
e4:a8:db:b2:69:6d:78:8d:e0:40:1f:e3:e3:2e:73:
90:a2:f4:9e:be:39:94:ba:40:10:4d:9a:03:5e:37:
1e:49:77:ea:03:e8:c0:c3:18:53:dd:6c:b2:51:7d:
44:db:f8:50:f3:4f:0f:ad:1b:8d:e9:de:d0:ba:c0:
d9:7b:b9:59:89:47:56:5b:7b:42:1a:cb:34:bd:0c:
71:e2:af:2c:59:fa:3d:dd:53:ee:05:5f:f1:08:2f:
19:2b:3e:49:99:77:e6:44:80:d9:6a:08:3f:ad:ce:
43:22:c3:f3:ab:91:bd:66:f0:7f:be:dd:ea:19:79:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:26:4F:1B:B8:FB:7C:AE:C5:9A:97:0C:34:CB:B4:71:78:AD:68:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/E5264F1BB8FB7CAEC59A970C34CBB47178AD6892.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215778
Signature Algorithm: sha256WithRSAEncryption
b0:b8:85:cd:d2:7a:d2:42:6f:c4:fa:22:c4:53:71:61:80:19:
92:e8:33:37:fd:0c:b2:b1:f9:96:28:41:7b:99:9b:3c:6a:45:
3c:54:48:0b:6c:57:a6:4c:ee:06:f2:0a:27:23:fc:cf:93:38:
4f:e5:51:49:13:36:07:ae:3d:ff:e2:e0:8e:f2:93:1c:1b:2e:
d7:eb:9d:85:7e:7a:be:39:03:b9:20:53:2d:39:2e:50:7f:df:
e2:34:88:70:50:d8:3c:85:86:4b:57:ee:69:6c:a0:8e:cc:d2:
01:ff:a9:b8:b3:3e:bb:0b:6c:37:64:29:ad:1f:08:ad:6a:5b:
a9:62:e5:19:09:8a:70:f0:d6:b5:80:9d:f7:ef:95:f0:f6:ef:
60:96:c5:7c:24:88:ab:be:db:fc:08:9b:ba:ed:df:ff:a8:5f:
72:6a:09:05:88:e2:b9:93:96:a0:6d:4a:79:df:0f:b6:e4:28:
10:0e:06:15:1d:d5:0f:55:7a:c3:39:af:60:c2:6e:04:51:9d:
69:be:12:2a:d4:de:08:64:9b:d3:d3:d5:4c:23:be:fb:2e:b9:
0a:a8:f3:ba:0e:70:0e:46:02:74:7c:07:11:69:da:08:de:ec:
85:c7:bf:9d:5c:a7:15:08:71:44:15:40:85:c7:88:85:36:35:
a4:0a:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:03:40 2024 by rpki-client on console-ams.rpki-client.org