Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74jXus0opsOTvMwR3GTd53t-xJs.cer
File: 74jXus0opsOTvMwR3GTd53t-xJs.cer (raw, json)
Hash identifier: fB0phh6vZjjM33uasO8ngd8oSRNgC23ha4yNarl17bc=
Subject key identifier: EF:88:D7:BA:CD:28:A6:C3:93:BC:CC:11:DC:64:DD:E7:7B:7E:C4:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F85976CCB67D5FFEE279F1C5361C5181F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 17 May 2024 08:07:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215731
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:97:6c:cb:67:d5:ff:ee:27:9f:1c:53:61:c5:18:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 17 08:07:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef88d7bacd28a6c393bccc11dc64dde77b7ec49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:7c:b3:da:ff:e5:bc:f4:6d:85:67:a4:13:
37:71:52:e6:1b:bb:2d:ac:2f:3c:e9:2c:5e:2a:a7:
6e:a2:ef:0a:d5:bd:e7:90:7e:a1:0a:a6:9a:03:d9:
a5:d5:29:a7:9c:1e:65:18:a9:d1:b6:6d:5f:2a:4e:
19:5b:c6:67:c7:eb:45:4c:6f:49:77:d4:04:4d:6c:
f0:5b:87:e2:59:af:3d:7a:23:d7:44:4b:cc:fd:a7:
ab:5e:2e:42:eb:e6:77:2f:9f:af:d2:13:9e:aa:6d:
7d:c6:12:73:20:47:99:b8:3d:40:93:2b:9d:aa:49:
c4:a6:52:3c:a9:14:47:07:a7:1f:69:ef:6a:fa:45:
e8:af:e9:7e:34:39:f5:c9:14:99:d9:27:9e:7d:db:
55:45:05:5a:a4:b6:27:e0:9b:d2:6b:d1:b6:c1:25:
9c:da:a2:8d:7d:9b:f9:64:13:b3:c9:cf:fa:15:65:
e5:c6:c8:2e:5d:da:8d:14:f3:eb:b7:db:79:1c:de:
ba:22:e9:d2:cf:33:8b:f9:c3:9c:60:34:9b:b8:34:
44:4a:a4:68:4c:bd:31:28:74:cd:51:f7:b9:97:3c:
d0:87:63:e8:f1:46:b8:30:37:05:fe:1d:ee:f3:ec:
b6:d7:9b:e8:48:c5:1b:50:b2:96:d5:b3:96:a3:00:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:88:D7:BA:CD:28:A6:C3:93:BC:CC:11:DC:64:DD:E7:7B:7E:C4:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/509e44a5-77ff-4426-a7ff-47aed75c6546/0/EF88D7BACD28A6C393BCCC11DC64DDE77B7EC49B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215731
Signature Algorithm: sha256WithRSAEncryption
80:be:b3:9d:4c:ba:93:aa:45:e8:88:7e:f4:80:b7:0e:1c:8d:
57:3e:5f:4f:b8:9b:1d:21:85:48:a2:ce:c0:e5:cb:4a:c0:9c:
4b:e2:48:05:d2:37:86:fe:d5:a7:34:aa:8d:f2:52:88:19:19:
a0:66:5e:ad:c0:1d:e6:18:de:b4:83:3b:7f:9d:22:55:aa:07:
7f:ea:e4:17:db:d7:62:6d:66:d9:7d:b8:4b:91:90:0e:f3:e6:
9f:ca:3e:19:ac:c4:5b:75:e6:12:85:44:a0:7f:10:c7:d3:f6:
1a:9e:b0:83:91:de:c5:89:35:19:d7:69:8f:27:b0:61:72:7e:
30:17:db:dd:14:f0:1b:d0:32:09:01:76:25:c8:ff:76:17:ed:
79:30:fd:db:ac:f6:64:8e:f9:ed:3b:d2:5f:5c:4e:67:6c:22:
23:e4:e2:91:f8:a8:54:2e:fd:72:9c:03:64:70:b5:12:af:d0:
8e:46:99:b4:b4:73:c1:4a:6e:4f:28:d5:7a:1a:ff:72:ef:06:
7f:82:39:e5:ec:2d:b6:ba:63:99:d1:71:56:a3:5e:b1:59:0b:
d2:2b:8b:3a:f8:21:0e:ff:29:c2:0d:51:d0:91:c8:66:d6:b7:
2e:72:2a:03:ef:3b:d0:d1:2a:5a:b1:82:d8:ea:cc:b6:e9:22:
b8:2f:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:56:04 2024 by rpki-client on console-fra.rpki-client.org