Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8YNmaWSA7-q0fbHbGXXy17aQHWk.cer
File: 8YNmaWSA7-q0fbHbGXXy17aQHWk.cer (raw, json)
Hash identifier: crdBcpkz7fXP1+Nj9GGfciItiNYrmldy2ugV1izCOVg=
Subject key identifier: F1:83:66:69:64:80:EF:EA:B4:7D:B1:DB:19:75:F2:D7:B6:90:1D:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC62482E8E9761D3666DBAD33A44C31D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.mft
caRepository: rsync://rpki.co/repo/Simple/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 17:48:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44937
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:24:82:e8:e9:76:1d:36:66:db:ad:33:a4:4c:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f18366696480efeab47db1db1975f2d7b6901d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:21:33:52:3e:2e:de:65:ab:1b:c5:a0:a4:
08:d6:3c:25:3a:54:06:fc:2c:bc:79:82:1a:3b:c5:
d0:d0:c1:4c:a1:07:f7:b8:65:a6:02:70:0e:5f:31:
42:db:00:03:9b:53:b7:4b:65:a1:f1:bb:ff:ce:72:
b0:8e:94:e6:6d:73:ad:5f:f5:7c:3f:4e:d9:d3:93:
fe:3c:ec:54:27:7f:fd:9a:7f:34:f2:91:be:84:38:
23:88:e5:20:63:bf:1f:91:45:1c:be:50:48:76:7b:
af:69:11:27:6c:9b:4e:8d:e4:99:e7:f7:f0:5f:b7:
64:23:0e:94:1e:f8:73:c6:c8:34:4e:5c:cd:c0:ca:
ac:bb:81:78:4c:dc:df:6b:ff:47:45:ef:8c:9a:81:
03:32:3c:7b:15:3c:be:4d:87:89:8d:d2:1f:a1:34:
e6:39:b8:13:7c:9a:77:fc:41:b3:b3:1b:07:a4:a0:
44:d1:3f:4f:7d:6c:2f:44:3d:12:2a:71:9f:9b:60:
85:a3:05:24:9b:39:1a:16:2b:bf:7d:bd:e8:ef:ca:
8e:23:af:5a:e2:6a:b0:56:d6:7c:e0:af:a6:41:78:
61:db:f0:e0:11:b2:ab:db:12:65:d4:ce:5e:e2:53:
5c:f0:c9:d4:71:2b:59:5b:fe:4d:bc:43:71:cf:22:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:83:66:69:64:80:EF:EA:B4:7D:B1:DB:19:75:F2:D7:B6:90:1D:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Simple/0/
RPKI Manifest - URI:rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44937
Signature Algorithm: sha256WithRSAEncryption
2d:f6:73:67:b2:e7:16:61:80:e7:99:96:d2:f8:6b:d9:fa:4e:
4d:f2:1a:ce:e5:dc:58:94:be:30:74:12:57:35:01:8c:ca:51:
01:6f:09:77:71:53:fb:49:62:fe:9e:9b:7b:3d:35:a6:d5:b3:
18:3e:0f:d2:61:d9:5c:19:79:75:e2:d4:74:a6:2e:d4:1f:c8:
9c:0b:40:ee:ee:c0:bd:cb:eb:01:ab:65:4e:e3:fc:5b:b6:45:
36:ab:3c:5e:08:c8:79:ba:ec:0f:7e:bf:16:90:c2:ab:75:96:
92:88:6a:85:ec:6d:f2:c2:fe:d0:e0:bc:c0:f3:c0:e4:ad:80:
0c:20:04:fb:b3:5e:96:2a:00:d5:8c:59:3b:cb:f2:62:c6:9c:
87:5a:dc:a1:31:cd:e6:c8:bd:60:c3:36:02:d3:cf:ce:ff:9c:
9f:54:a0:cf:c4:ff:f8:76:0c:70:5a:72:ad:78:98:66:34:05:
72:d8:e9:a2:a5:d8:a7:72:4e:dc:c5:3e:b9:c8:90:f6:dc:5f:
69:5c:57:09:0a:76:c6:86:ba:c0:0e:be:b2:40:2d:4f:5c:7d:
a0:7c:36:2d:65:bc:2f:c0:eb:42:ea:35:be:fd:dd:eb:fe:09:
22:aa:e8:b9:c3:cc:6e:48:9b:53:76:ad:af:02:ca:b2:f7:76:
49:ba:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:05:36 2024 by rpki-client on console-fra.rpki-client.org