Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
File: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer (raw, json)
Hash identifier: 5FyddqbUN5sSxf3LOXCjx12RYeydgremP620OijQFTk=
Subject key identifier: 01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191B8C8A7154388BC642379F9D74349284C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Sep 2024 16:47:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214266
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:c8:a7:15:43:88:bc:64:23:79:f9:d7:43:49:28:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 16:47:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=010d68a876cf5793fd00876254253d382779027b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:e2:a6:23:ad:79:39:69:61:cf:a0:2c:ef:
5c:db:4e:8b:1c:89:0e:b9:a7:bd:30:c6:7d:1e:39:
3c:4f:b4:5f:01:cc:bc:ac:ca:57:8f:ff:27:30:ff:
d1:9d:36:31:fe:07:ea:9f:5b:4c:2b:4b:ab:29:e3:
0c:cd:fd:a1:f9:1a:cf:bc:df:90:6b:3a:f4:b4:12:
0a:b6:2d:71:e2:15:88:e4:d9:37:35:25:aa:cb:b4:
af:68:88:ee:9b:54:36:1e:b0:42:92:4f:cc:86:d3:
be:55:cc:dd:2c:be:2a:c3:0b:71:a9:cd:40:db:d2:
47:e6:13:0a:40:26:46:e5:a1:9b:5d:4d:99:1a:ab:
83:f7:d6:44:fa:90:b0:c3:16:73:b8:ce:94:4e:9c:
54:5e:12:6f:a8:20:ce:04:27:8a:a1:12:f5:dd:96:
c2:89:62:e0:9d:75:f5:11:d8:77:b3:f1:3c:98:ac:
c9:fb:b9:ec:3a:e6:69:04:c5:e7:99:20:80:e2:dc:
2a:8a:fa:80:08:d5:af:be:56:4b:2a:b4:70:42:f1:
83:fd:20:94:1c:b3:d1:a3:0d:ee:3a:52:23:71:c4:
96:a2:ee:e1:04:39:db:63:d5:4e:c7:2f:7e:fe:62:
72:0e:e9:32:20:d1:2b:33:fd:3c:cb:53:8b:3c:39:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214266
Signature Algorithm: sha256WithRSAEncryption
6a:df:38:bd:48:ac:b6:b2:0d:1f:e8:b6:18:56:d9:86:f6:ce:
cb:46:43:aa:de:d6:62:0e:e9:1b:f9:78:37:33:a9:5b:07:04:
6a:f4:bf:80:bc:24:7f:13:f4:dd:da:73:0c:d8:d7:83:ac:c0:
c5:2f:ed:98:28:97:7a:97:16:2a:9d:89:ff:1b:fa:9c:71:21:
60:eb:72:a8:d2:55:f1:06:63:f2:48:24:3b:2f:f9:8d:39:ad:
6a:a0:2b:3c:18:d0:c6:a4:8f:0c:54:d9:d3:51:35:99:af:4f:
39:c1:48:5a:e7:2e:93:db:f5:a6:e5:1a:38:49:72:b7:ab:80:
9f:55:5b:89:e0:c1:6d:69:c9:64:c9:8e:f6:af:ea:4f:32:d9:
ee:45:85:8f:a1:4f:f4:58:44:88:f5:e3:00:fe:67:90:7a:59:
a8:af:f9:28:df:13:a1:98:0d:c1:8b:a9:90:c7:70:9b:e9:28:
a9:55:b0:62:3b:dd:5b:9a:e1:40:dd:2e:83:42:69:ad:5f:48:
c6:16:45:eb:b6:72:4e:9f:5e:9e:0e:33:90:70:91:6c:4d:15:
30:6c:c2:a7:18:bf:70:8f:9e:00:e5:cf:3a:2b:2f:76:d3:45:
fb:3d:21:e8:72:4d:d3:80:03:53:47:ff:34:4c:c4:81:2e:f2:
a0:99:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:01:41 2024 by rpki-client on console-fra.rpki-client.org