Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A8QwoPCdG4Iwgk7wyZONOA5gJDg.cer
File: A8QwoPCdG4Iwgk7wyZONOA5gJDg.cer (raw, json)
Hash identifier: 9nY/7NWPl+BFQUydu3vYHz6zHJE9ob5+NbXuD/H9QH0=
Subject key identifier: 03:C4:30:A0:F0:9D:1B:82:30:82:4E:F0:C9:93:8D:38:0E:60:24:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72664DBBF996A936341AEC698B28C81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/A8QwoPCdG4Iwgk7wyZONOA5gJDg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211665
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:64:db:bf:99:6a:93:63:41:ae:c6:98:b2:8c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03c430a0f09d1b8230824ef0c9938d380e602438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:f7:9c:33:25:ac:ed:10:5a:72:90:6b:74:
fe:8f:ec:6e:6b:d7:b8:36:e0:d2:d8:d1:56:25:44:
a6:df:67:58:9b:36:44:4b:99:bf:c7:56:48:1d:48:
27:b5:35:2d:de:e7:e0:d4:82:39:ba:bf:32:bc:72:
4c:8b:c3:35:45:8b:8c:3c:a3:42:ca:97:91:68:fb:
94:5f:f0:ea:2d:39:be:44:9b:f3:a5:04:63:23:c9:
64:9d:56:1d:92:4c:54:4c:18:2f:25:05:1f:26:84:
40:45:53:ec:43:87:c1:13:74:3d:6f:13:4e:29:ab:
2c:89:c1:2b:9c:82:fe:19:07:b1:32:7a:7a:78:be:
f0:e6:fc:15:c4:72:4a:29:cf:22:e8:da:42:c2:be:
b4:72:86:78:31:74:17:39:ee:13:7e:bc:74:35:90:
d2:03:0d:e1:db:14:8e:ab:ab:15:ba:79:2a:8b:e1:
31:f9:05:02:8e:87:9c:f0:51:da:4a:6b:5d:99:3d:
29:ec:31:8d:f0:ac:5d:77:98:08:a8:ef:4b:41:a8:
9d:e4:4c:b5:7d:c4:e6:68:ca:c2:8a:35:b8:a7:ab:
6d:26:5b:f4:70:02:41:f5:a5:09:e5:a5:d1:87:8c:
db:0b:56:1e:3f:b7:a6:62:f3:1e:65:13:2a:5e:26:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:30:A0:F0:9D:1B:82:30:82:4E:F0:C9:93:8D:38:0E:60:24:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/A8QwoPCdG4Iwgk7wyZONOA5gJDg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211665
Signature Algorithm: sha256WithRSAEncryption
41:c5:26:a6:91:1f:1b:99:35:23:36:5e:ae:5d:db:14:d7:6c:
99:b4:e2:e4:e4:50:1b:3d:74:88:3e:c2:0f:d9:a7:6c:8a:59:
7e:d0:d6:d2:08:0d:94:c8:fc:84:42:c5:2a:2a:25:6d:a8:05:
fd:0e:cb:3a:94:b0:35:fc:63:ec:af:07:06:d1:f4:e3:bf:66:
25:9f:21:61:20:d5:a2:08:4b:c6:88:ac:fe:8d:08:9e:b3:e1:
03:cd:6f:a6:3e:43:26:9b:ad:38:72:34:61:46:89:da:92:7b:
97:c2:9a:ab:c5:ee:8c:b4:9a:17:ce:17:71:1a:a1:09:87:a6:
77:f8:15:bc:36:66:44:05:66:7e:4d:97:59:64:d1:cf:60:24:
b6:c3:61:3d:a8:d0:e1:d9:8f:85:d5:8c:55:99:20:32:31:e0:
3f:bd:ed:16:0c:8c:68:39:b2:f8:64:66:28:7a:fd:49:e3:15:
ae:26:a0:75:60:f0:eb:38:12:d2:69:d0:22:d3:bd:db:4d:c2:
da:3c:f8:60:86:21:ba:42:8f:d0:c1:76:f4:67:a5:9b:eb:de:
10:43:94:a5:56:01:40:85:c1:90:d1:6a:37:03:11:df:a4:2c:
00:3e:b4:f3:06:72:42:df:77:40:19:c8:f7:5a:07:4d:3f:b9:
7b:05:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 00:17:51 2024 by rpki-client on console-ams.rpki-client.org