Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer (raw, json)
Hash identifier: TdfK7OiVcssCg3G8gQu//gmlCbE2k391ZlJSPIgPF4I=
Subject key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793486667F7945FEF04232C55EB533C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216222
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:48:66:67:f7:94:5f:ef:04:23:2c:55:eb:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:47:3c:5e:b6:82:3a:f0:3b:bc:a1:02:43:
4c:06:f6:cc:51:b4:2e:89:51:b0:1e:bd:13:14:3f:
bf:a4:82:34:93:ee:61:08:35:c8:00:c2:a3:d5:5a:
4e:ef:15:f4:b8:0a:a3:96:4c:03:ac:27:8c:9b:f5:
b5:fa:d3:d2:a8:b5:42:03:04:1d:c1:da:ce:21:c7:
06:f0:93:82:ac:75:8c:70:f1:fb:3d:f7:63:23:57:
6f:83:29:ac:7a:5b:3d:65:61:1f:6a:d9:1d:cf:d4:
e7:1e:93:d4:6d:c9:db:b9:6b:72:db:90:8a:14:ff:
10:8e:5b:f6:7d:af:c8:d0:ee:82:51:ee:0c:6a:2c:
7f:da:0d:5c:89:dc:ac:30:1e:97:b6:31:3c:66:7e:
04:6d:1b:f9:e1:40:f4:ab:50:a4:b7:02:3a:2e:44:
bc:cb:d5:e1:44:8f:5d:83:7e:95:eb:b8:a4:f0:52:
0e:6c:bf:8f:5a:b0:4a:27:2d:02:ac:d3:e1:fe:1f:
93:1d:8a:25:a6:a5:43:6e:bc:26:72:5c:b5:89:df:
86:45:97:8a:4d:ca:91:7c:79:63:6c:e0:2a:11:c1:
01:5a:79:bd:0d:df:fb:f7:44:e0:15:19:a8:a9:e2:
cc:fd:38:a2:2e:19:4d:ed:5e:7f:8b:c7:c4:c2:c8:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216222
Signature Algorithm: sha256WithRSAEncryption
01:38:0e:da:70:cc:ea:76:9d:77:55:da:0b:77:12:8c:b1:5d:
08:52:36:2c:63:33:6e:28:7b:4c:4c:11:7b:fb:46:e8:72:7d:
4d:9c:d6:ab:43:35:38:96:97:ac:2a:11:35:79:45:e4:d3:6a:
ef:1a:92:56:fb:c7:54:09:6a:60:80:3c:56:98:80:46:4e:58:
27:fb:32:e7:b3:b7:1c:82:61:0d:ce:4f:6d:dc:1b:ba:ce:82:
91:47:12:a9:25:a2:3b:20:7f:6f:d9:fe:fa:e2:fc:b6:e9:48:
ef:b6:ae:87:cb:c9:20:17:e8:7d:73:e8:f4:ab:f6:0d:0e:78:
45:3b:1f:70:2f:e3:89:b2:bf:09:ea:60:0d:a1:6b:28:e7:73:
9a:9e:e9:10:3f:be:f3:cd:5d:ad:58:d8:ee:e5:2f:3b:3a:99:
cc:76:d1:57:8c:04:f9:55:5e:0b:65:cf:7b:f3:e2:81:f7:18:
7f:0a:58:8e:01:9a:76:54:58:11:8d:3b:16:59:8f:d0:1a:08:
d8:5c:3d:f6:c4:50:a9:de:77:ea:2c:6d:f7:8d:ee:79:cf:b4:
ae:6c:9b:07:dc:43:ed:48:38:28:2a:45:99:9e:c0:bb:6f:dc:
ec:0f:36:0d:5f:97:c0:b0:4c:de:9f:61:f1:77:01:31:e6:f3:
9b:49:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:26:54 2024 by rpki-client on console-ams.rpki-client.org