Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
File: 7GV-idqz-xXjuuDrGsf6yT32OF0.cer (raw, json)
Hash identifier: Ic7N51VZ/Yt6lprTHmULpW4hXtsQUBaoBdUdBIyHF9E=
Subject key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCF38E7ABE7021B2A50494222945E3704
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jan 2024 12:07:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215786
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:38:e7:ab:e7:02:1b:2a:50:49:42:22:94:5e:37:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 12:07:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:ad:18:0f:d8:ef:17:3f:12:aa:fe:7e:2e:
02:9e:44:3b:97:1e:79:2e:d6:9a:22:bb:22:1e:9a:
09:d7:3a:a8:ee:d6:f1:f6:32:9c:3d:0e:bd:32:cf:
f0:00:d6:48:1a:d6:db:44:8f:5b:3b:f5:bc:5b:ae:
2d:0e:22:e5:c8:03:fc:b7:09:8e:66:09:89:c1:15:
b0:12:be:53:db:b3:35:69:11:64:5d:51:f9:27:09:
2f:58:00:78:10:7c:62:5b:e7:de:a0:9b:cf:7d:78:
34:39:5a:e6:98:c4:dc:cd:f2:e8:0a:9a:d8:e4:bf:
00:2b:96:24:1e:0b:60:28:0a:9f:6b:0c:4a:80:c0:
67:56:3c:30:3e:38:e0:a8:46:cc:71:4a:4c:a1:23:
8a:6d:a9:b9:a7:ec:62:53:f8:0a:56:97:c9:66:f1:
d1:49:05:61:d2:82:1d:66:a6:51:4d:a7:78:d9:58:
0e:12:fa:2f:4b:8a:3e:5a:2a:8e:7f:eb:90:ff:df:
4d:63:95:da:af:ba:78:2c:ef:c2:25:2f:f7:f6:0b:
7e:18:4e:f4:34:d2:a7:89:11:16:1b:3b:0d:b3:b4:
bb:f4:8a:5d:c8:a8:c6:d4:c9:1b:f0:40:7d:e4:06:
7f:88:d7:f6:70:de:0f:b2:15:65:4d:61:6e:cd:a7:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215786
Signature Algorithm: sha256WithRSAEncryption
61:44:bd:05:67:ec:18:01:79:29:05:e2:95:c5:58:42:40:f6:
58:a7:d6:e4:3a:9d:c5:fa:cb:84:b6:56:e8:18:18:8e:07:8b:
4b:23:f3:a1:6a:75:47:13:ba:1d:a3:39:a7:b0:62:57:28:d2:
bb:60:17:59:0a:75:c5:f4:a6:aa:d4:b1:d1:84:88:4d:de:1f:
c7:ee:21:f3:73:d0:b7:37:92:8a:98:26:5d:fb:2f:fe:c3:97:
95:f7:c0:75:29:a7:85:60:1d:61:2a:a5:f5:d5:ad:31:5e:83:
8c:0b:e8:91:29:e2:89:43:e8:73:b7:f7:87:45:24:a8:8d:c9:
77:10:9f:56:91:74:b4:9f:3d:6a:7e:4e:37:24:2f:3d:35:ad:
11:ab:f5:c4:c5:98:f7:7f:8b:7e:35:c2:96:39:a7:c9:55:6c:
d0:4d:0c:cd:02:ac:e5:ac:56:44:40:ce:49:e6:11:88:71:c4:
b1:d1:54:60:98:66:cf:d2:f7:aa:07:e0:80:a1:e7:7e:21:60:
9e:19:e7:eb:da:9a:89:ec:01:0a:5b:38:29:12:e7:f8:98:b2:
6f:91:73:4b:47:9f:31:a8:c4:8a:a1:d7:5f:49:21:9f:f6:8b:
8f:f3:b5:c8:ea:2f:48:bf:b3:78:27:24:d9:b9:44:c3:59:3d:
af:e4:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:32:13 2024 by rpki-client on console-fra.rpki-client.org