Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8L_9ke3QeSGPdPosV29kAINLQ2U.cer
File: 8L_9ke3QeSGPdPosV29kAINLQ2U.cer (raw, json)
Hash identifier: L302uoR9obiWyZ0p6nKgWaZZ+d0dH/YaLwEMGv+AJe4=
Subject key identifier: F0:BF:FD:91:ED:D0:79:21:8F:74:FA:2C:57:6F:64:00:83:4B:43:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193AD243BF8C0BEC8385C59913253BCAD4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Dec 2024 20:37:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214752
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:24:3b:f8:c0:be:c8:38:5c:59:91:32:53:bc:ad:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 9 20:37:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0bffd91edd079218f74fa2c576f6400834b4365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:a7:b5:37:6a:79:ad:1e:c5:cd:bf:86:8a:
71:8f:ea:58:3c:84:07:ca:de:e2:b1:81:44:84:25:
9d:71:f9:53:5f:bb:b3:1f:f5:9a:84:5b:c3:83:44:
96:dd:79:3f:5c:e4:67:35:8d:61:e9:da:77:66:b5:
17:85:3f:0e:a6:6c:72:71:dd:12:09:68:c8:89:62:
8e:78:e8:d8:b7:13:b4:33:9f:41:9b:82:c4:4d:b1:
9e:a8:b4:b2:3e:9e:20:12:7b:79:85:cd:eb:12:97:
87:41:5d:cb:ad:60:30:ec:52:13:dd:dc:b9:bc:49:
5d:2d:43:5e:b2:7a:30:e2:5d:44:b9:4a:a6:e3:49:
fe:41:3d:0f:50:6d:f1:4d:00:6e:90:09:a7:37:aa:
69:89:38:47:92:e2:22:72:f1:2f:24:f1:51:90:d0:
5c:f6:c3:c5:18:22:5b:2d:77:f3:cd:53:39:b0:79:
ef:f1:92:c9:be:a7:bd:e3:88:8c:0e:46:41:4b:c9:
88:58:f6:0f:0b:f1:66:6d:c3:78:8a:75:ab:7d:da:
f4:0a:72:0d:8c:28:42:e5:d1:35:a3:d8:34:e5:8f:
e5:2f:87:66:a1:fc:30:ea:ca:22:43:75:92:98:0b:
8d:e9:20:c0:56:69:23:44:ac:60:64:f7:4e:7b:7d:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:FD:91:ED:D0:79:21:8F:74:FA:2C:57:6F:64:00:83:4B:43:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214752
Signature Algorithm: sha256WithRSAEncryption
33:66:06:0d:9d:9d:ba:73:4c:72:69:84:ca:42:87:0d:86:de:
81:3c:d9:0c:91:97:e2:0d:75:c3:12:d6:45:fe:bf:c6:45:b4:
e5:b4:72:91:25:af:3f:27:65:28:44:68:ab:34:86:1a:f9:1b:
91:fd:ee:9f:9b:7b:d2:45:ed:96:3e:fd:21:85:f8:76:f2:e2:
c5:a4:d2:5e:bf:5a:5f:3a:35:83:a1:73:82:7a:47:77:54:e1:
32:67:a9:d1:53:9f:6e:fd:9b:4e:41:db:de:f2:d8:95:bb:92:
88:38:72:47:03:44:20:58:de:40:5f:d0:7a:32:be:4c:5e:00:
b6:57:9c:c4:8c:e1:5f:63:41:76:1e:d8:05:b7:79:11:c7:b7:
0d:39:c7:e7:63:fd:81:b2:ad:d5:ff:3f:24:43:53:6c:b0:ed:
b5:88:9e:25:97:cc:27:91:73:56:da:f7:36:f1:0a:fa:62:d4:
57:5f:49:ce:b7:cb:a4:9e:b4:f1:ab:68:77:b8:b3:71:6f:6c:
c1:cb:27:36:8b:ed:29:b8:c9:6b:eb:3e:90:3c:9d:72:bb:fb:
a9:5d:0d:75:a1:9b:ee:54:00:ed:50:14:23:81:28:49:ca:c7:
b4:0b:04:b2:54:88:ac:eb:9d:f2:34:93:f2:4c:d4:85:13:e7:
fa:82:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:59:35 2024 by rpki-client on console-fra.rpki-client.org