Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.cer (raw, json)
Hash identifier: xQMQPwGVGnraT3CGe2MNzElQftL0WbnWCozSdsZPw80=
Subject key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAEB451D3D4FB8EB42D2615E715D8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211688
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:eb:45:1d:3d:4f:b8:eb:42:d2:61:5e:71:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:f9:4d:93:a0:89:28:64:fb:1f:d2:58:5c:
28:7d:03:d4:52:5e:66:07:4d:91:89:7a:dd:a7:c2:
fe:36:fa:1e:f4:b6:da:28:65:ad:b9:37:a1:c9:2a:
a9:c9:09:7e:28:82:26:85:94:f0:5a:5e:36:84:3c:
18:94:67:0d:bd:fd:da:9c:c6:9c:d9:23:f0:29:19:
ab:53:a5:cb:9d:b6:14:32:d7:c1:e2:fc:6a:0f:9c:
c7:9e:5b:61:f1:75:37:e6:5a:9a:5b:ff:8b:32:50:
c2:8b:e4:6c:e7:ed:e8:94:42:7e:54:65:7b:e0:a7:
06:0d:d2:67:9f:c9:79:04:ab:0f:53:d2:b5:a6:e1:
9f:97:f5:86:71:26:e3:ae:3d:cb:8a:17:78:db:60:
41:59:74:a7:61:41:8d:b5:39:dc:02:08:27:17:f6:
cd:ea:aa:4a:19:44:89:d7:4b:d1:ae:ce:d5:99:d6:
ea:e6:15:12:d4:da:4b:e5:f2:8f:92:d8:8d:3f:9d:
51:89:18:52:6a:37:de:c5:f7:f8:28:31:27:e3:91:
27:f7:24:6b:e3:0a:6a:57:6a:fc:60:6a:df:99:64:
33:70:d3:47:3a:8a:57:99:86:f7:57:76:24:36:5b:
c0:57:d5:67:5e:61:86:ed:63:12:17:49:61:0a:e2:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211688
Signature Algorithm: sha256WithRSAEncryption
a5:9b:0f:1e:de:72:53:48:d8:8a:ba:34:17:2e:4e:67:09:7c:
10:43:fa:8d:7b:63:58:c7:d5:7c:3c:f0:1c:07:ae:4c:1f:3d:
58:9e:b1:2e:fa:a0:1a:fc:dd:c5:ff:d0:33:c3:c1:c9:57:4f:
97:38:34:15:7a:0a:ac:a7:dd:82:0a:b8:1c:27:fb:fc:73:38:
8a:b8:53:f3:5a:ff:ea:67:29:af:e7:8b:5e:1f:78:92:e7:15:
ed:8f:9a:3f:36:5a:c4:61:aa:4c:59:75:ff:ec:73:e3:ae:53:
57:41:88:a5:c2:49:6b:28:77:e2:70:dd:8f:e9:a6:ad:bb:bd:
ed:1c:0a:c2:c1:fe:97:7a:e6:a8:ef:ec:27:c6:b3:f0:19:42:
de:0a:d5:94:b8:5b:0b:fe:90:d1:a2:05:0b:3d:3f:95:fd:e5:
f7:91:e4:bc:69:ce:0f:35:44:e3:0b:cb:07:75:a1:71:99:6e:
6d:fc:8d:23:ff:54:f5:0f:48:98:57:2f:ae:f1:cc:06:9e:0b:
72:d3:74:8f:0f:ec:52:11:48:00:8e:b7:2d:45:f6:33:9e:e5:
7e:95:ed:56:4f:f8:4b:3e:c7:21:68:47:c8:56:53:ce:66:b3:
63:e2:78:9a:ac:9e:e6:1d:d9:d7:14:7e:d0:b7:8b:8f:4e:11:
25:d3:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 09:14:21 2024 by rpki-client on console-ams.rpki-client.org