Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
File: 9aKrEck1CB9eSaaFyDl49vc9TaE.cer (raw, json)
Hash identifier: 3Ff5egKIGozIhYjpd9fpkTsE/Cx9/lwwjONZFsBqris=
Subject key identifier: F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191E92D1F7819751F64C382C94335B97020
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Sep 2024 02:18:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51999
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e9:2d:1f:78:19:75:1f:64:c3:82:c9:43:35:b9:70:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 13 02:18:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:39:20:1a:b1:21:bf:21:f3:cf:48:16:80:
cd:1e:de:73:ee:9c:a4:56:e7:f8:10:12:56:c4:8e:
9c:e4:a7:f7:ef:9a:a7:d0:54:87:43:5a:7e:d7:89:
83:e2:6a:e3:ab:91:5b:df:78:f3:30:bf:25:fe:a0:
d0:83:51:85:7e:ad:fc:60:d0:1b:16:20:e7:7a:39:
8f:b1:f1:e9:7d:9b:be:9d:0b:02:45:13:ef:1a:a0:
87:3d:08:2c:a0:13:da:0a:76:11:d5:8e:8f:fd:f0:
65:03:7e:dd:52:14:53:99:13:91:f0:b6:1b:ea:e1:
14:86:62:80:65:34:0a:2d:40:f1:11:a0:3b:c3:5c:
b5:83:30:c0:8d:8a:41:96:f0:e1:56:1b:0a:2f:9e:
e9:04:7b:75:02:85:4f:7e:a7:3c:93:54:cb:0d:97:
01:cf:11:b0:63:86:8f:ff:20:6c:dc:a8:aa:21:19:
35:c7:f8:9b:18:7e:0f:7a:9a:f2:f5:d8:24:84:65:
fe:c3:c3:ec:3f:62:d0:9b:ff:bc:21:5a:77:0a:a8:
92:58:35:61:06:56:a4:bb:68:3c:63:34:00:37:bf:
9b:56:e2:bd:60:d8:65:37:77:f5:2a:fe:03:6a:1c:
ca:8d:7d:94:57:d6:9a:6e:fd:17:3c:20:b8:59:d2:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51999
Signature Algorithm: sha256WithRSAEncryption
94:43:e9:75:d8:ff:53:ba:0f:d0:16:08:38:9b:12:52:2f:11:
0c:a2:0c:79:7b:db:f9:63:c9:f9:4e:79:d8:73:6b:e5:02:ca:
fb:25:fc:f1:a3:2d:d8:24:11:92:e2:18:dd:d8:47:85:02:ac:
1b:78:fd:ea:d7:5d:2f:aa:46:cd:7d:d6:09:1d:15:a6:59:1c:
d4:26:c0:e2:d7:b8:88:fc:0c:c4:66:70:f0:15:25:3a:09:39:
b5:db:42:5a:1b:44:a6:32:72:70:fd:a7:64:a6:ce:ff:37:e8:
6e:cc:4e:e3:10:bd:51:d5:8b:f0:66:31:d3:d6:5f:3f:e5:8c:
4f:8e:e7:27:e3:94:27:50:54:2c:c0:19:4c:e0:de:9f:0d:41:
2e:ea:0a:d0:ed:e4:6f:28:9b:02:a6:a7:7e:bf:04:31:f6:cc:
97:ce:3a:14:93:bd:e5:67:fb:ca:18:37:b1:1d:3f:8f:ac:b5:
15:9c:03:71:79:a9:4a:39:e6:0b:c0:11:48:22:04:90:be:5c:
88:5a:5e:c4:6d:fc:f3:c1:5c:3f:de:70:6b:e1:70:62:3e:f5:
2a:ae:91:d6:7c:4f:1f:dd:84:51:58:b3:f3:ff:37:fc:7f:e0:
e1:f5:1b:4f:07:4b:e0:93:e7:db:78:4b:fb:c0:96:cd:54:0e:
10:18:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:01:08 2024 by rpki-client on console-fra.rpki-client.org