Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8_iKYhsPb1cW0HHdoh84pr69p4I.cer
File: 8_iKYhsPb1cW0HHdoh84pr69p4I.cer (raw, json)
Hash identifier: Z4rMLP7Vm7tkFpaQFkA6l7QYLjG54P/FjfX2BAftxk4=
Subject key identifier: F3:F8:8A:62:1B:0F:6F:57:16:D0:71:DD:A2:1F:38:A6:BE:BD:A7:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254EF4A96C930A4C4D916F962F8D8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/73cfad-649f-41c6-b123-aeb2a7c9f817/1/8_iKYhsPb1cW0HHdoh84pr69p4I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/73cfad-649f-41c6-b123-aeb2a7c9f817/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211267
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4e:f4:a9:6c:93:0a:4c:4d:91:6f:96:2f:8d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3f88a621b0f6f5716d071dda21f38a6bebda782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:25:6a:06:78:39:b2:10:ec:05:4b:1e:f6:
4b:60:71:57:c5:5e:52:19:68:3a:b4:0a:d3:68:39:
91:0c:93:68:bf:7b:84:77:1f:82:8c:9a:66:17:34:
7b:dc:47:8f:18:3e:0c:8a:14:ab:84:7b:4a:b2:20:
47:f0:18:7d:b1:44:db:13:16:87:93:ad:f8:a3:88:
ce:a9:08:b9:25:c8:ea:5d:02:66:8c:cf:46:fe:24:
a5:23:b9:1e:7f:39:db:4a:ea:b9:36:dc:0f:a4:82:
c8:51:df:a6:69:aa:fd:ff:76:e0:cc:e0:01:e7:fa:
b7:8d:20:89:63:28:d2:2b:be:8d:ee:a3:84:d4:62:
8b:92:53:9c:b2:c7:ab:68:59:77:7e:d4:54:67:f9:
b2:30:b6:50:06:91:4c:39:e0:1a:d0:88:f0:f5:bd:
9e:c6:b5:70:68:c0:90:2f:3c:2c:33:fa:01:e0:cd:
33:52:13:fa:b3:e3:87:73:45:05:ea:ef:15:a1:2c:
83:b6:b9:be:94:2c:e9:f8:da:ff:9c:28:1b:8e:85:
92:38:71:c7:4b:2c:79:fc:85:03:f5:d8:fd:e2:6e:
da:6c:96:5b:55:98:3b:af:5d:8d:ac:23:a2:a3:dc:
58:6d:ef:16:c6:92:ce:d4:90:eb:e1:5b:0b:34:1c:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:8A:62:1B:0F:6F:57:16:D0:71:DD:A2:1F:38:A6:BE:BD:A7:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/73cfad-649f-41c6-b123-aeb2a7c9f817/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/73cfad-649f-41c6-b123-aeb2a7c9f817/1/8_iKYhsPb1cW0HHdoh84pr69p4I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211267
Signature Algorithm: sha256WithRSAEncryption
4d:a0:31:59:5c:0b:e5:3b:8b:55:79:a8:a7:04:22:7b:ce:5c:
af:4c:41:14:52:3e:f2:66:ad:af:db:32:ac:f9:9a:f3:5a:61:
67:8b:29:fb:f0:eb:6a:05:06:b8:be:c6:2c:08:bc:10:2d:50:
21:bd:7c:d1:6a:45:c3:18:f9:86:09:e7:bc:e6:c1:d0:e9:27:
16:6b:8d:65:23:37:ea:b8:9a:54:61:3f:ed:d7:27:4f:1a:68:
5a:73:bb:95:fa:0a:48:47:6c:03:3a:93:34:8a:03:ca:5f:fb:
4b:d4:58:7f:83:dd:cc:c0:0a:6a:11:d3:0d:10:27:e1:c1:03:
cc:b8:c6:fd:ef:a2:6e:58:64:f2:75:ff:43:20:8c:66:b2:e8:
68:db:b1:45:8f:3d:f1:b1:05:f4:2a:23:7e:62:16:49:c3:73:
b2:62:d0:09:a9:de:dc:f5:ea:58:e9:d0:a5:9f:e1:f3:2c:0c:
72:72:fa:4a:b8:f6:6d:e1:47:16:ba:05:12:5f:2f:44:8f:8a:
dc:ee:ce:45:22:4b:6b:b2:e3:b5:83:01:fc:f5:fb:99:8f:cc:
97:12:59:4c:7b:bc:d4:89:20:3b:0c:44:99:cf:5c:14:c6:ea:
75:7b:9e:32:00:c9:ab:e6:f9:10:12:38:62:11:d8:f8:a0:40:
63:87:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 14:09:11 2024 by rpki-client on console-ams.rpki-client.org