Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer (raw, json)
Hash identifier: Wsv+Q2p/eoKjfYfTKPNkfWrr0hWKqq2utuRLF8HgqZ0=
Subject key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BBCDE3157041FFAB3407745B9FDA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24952
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:bc:de:31:57:04:1f:fa:b3:40:77:45:b9:fd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:6e:94:73:73:08:7e:e2:3d:a1:cd:c4:bd:
9b:01:0f:f1:50:c3:c7:85:c8:ae:69:ac:ad:19:26:
31:16:ac:be:54:f4:f6:9e:09:ab:5e:a2:61:bb:e7:
dd:88:40:9f:f2:be:53:19:fe:40:95:e1:65:e3:af:
09:74:ef:98:3f:97:b2:74:2a:8d:6f:33:60:71:07:
ef:5d:bd:d6:41:99:2d:c1:a7:f5:48:73:1f:eb:ba:
b3:10:bf:1b:5f:ba:4a:85:95:7c:a6:ad:8b:b0:fb:
38:76:e5:a5:8f:67:14:f6:b1:c8:9e:45:f5:23:5f:
e7:b0:83:1b:dd:60:a5:bc:ad:c3:2e:46:02:cc:5d:
8b:ef:f9:19:71:92:11:ce:b4:13:b8:a3:c3:6b:6f:
72:fe:21:45:36:c1:bc:52:db:b9:b2:53:19:0a:86:
20:b5:75:41:d8:1b:a4:69:48:8d:62:33:06:52:40:
24:2c:47:2c:83:3d:bb:d7:3f:84:01:b6:fc:8d:bd:
47:27:0f:27:c6:44:07:93:0d:fe:a9:1e:8f:b2:a4:
8b:6b:e8:ae:7e:fe:0e:15:ad:82:92:91:0c:92:03:
68:fe:b9:c2:dc:8d:4e:f6:9e:70:42:31:2b:31:f8:
1a:de:27:1b:a7:1e:36:da:e6:17:ed:a1:57:1b:c5:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24952
Signature Algorithm: sha256WithRSAEncryption
6b:55:c1:10:19:db:30:a6:4e:f0:6b:a4:c8:16:e1:40:7c:6e:
36:8d:d5:83:83:cb:bb:f0:64:65:8c:7a:ed:57:72:11:05:8f:
0a:f4:46:27:14:0a:63:02:93:6a:57:7f:96:a2:fd:72:f0:69:
8e:6e:2a:4e:3f:e6:9c:32:52:c1:69:6a:ef:85:97:a3:4d:7f:
06:0c:59:28:2f:7d:7d:72:5a:72:9f:37:02:be:71:ce:07:b3:
84:d8:dd:7d:e6:ec:8a:b1:7e:66:10:ee:de:2e:11:fd:75:f7:
13:fe:df:28:cd:76:79:c2:67:69:93:3e:f2:51:d9:a7:f5:de:
6b:e4:75:09:1f:0d:20:3a:89:d8:3c:d5:ec:62:78:18:58:86:
4b:ad:70:fa:34:5a:2c:6b:19:f9:94:e2:62:5d:92:dc:53:21:
fe:95:88:d0:d9:da:2c:a5:55:f7:b6:61:d4:e5:1a:da:5f:0a:
0b:c2:c4:eb:51:31:de:68:29:f3:c8:73:65:2f:66:e8:3a:20:
3e:e2:24:a8:76:24:2e:5d:d8:d3:38:77:69:84:75:fd:bb:2c:
4e:ff:a2:c6:79:cf:7a:33:56:b5:c7:c4:a7:dd:8b:fd:26:f9:
56:58:1d:10:c5:f8:d5:13:7a:bf:23:97:4e:bd:8a:81:30:03:
94:0f:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:47:55 2024 by rpki-client on console-ams.rpki-client.org