Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ag_mr9P5Nca-zDT1QEs-4YAYH34.cer
File: Ag_mr9P5Nca-zDT1QEs-4YAYH34.cer (raw, json)
Hash identifier: QbtCpbiseukwx0rwVZmbiyJpuBDAYZBMfe6qviheUDc=
Subject key identifier: 02:0F:E6:AF:D3:F9:35:C6:BE:CC:34:F5:40:4B:3E:E1:80:18:1F:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC9E5AFF464FE6A292FE87BE6CB0CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/74c133-7d50-461f-8dba-79fdf65d4914/1/Ag_mr9P5Nca-zDT1QEs-4YAYH34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/74c133-7d50-461f-8dba-79fdf65d4914/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198465
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9e:5a:ff:46:4f:e6:a2:92:fe:87:be:6c:b0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=020fe6afd3f935c6becc34f5404b3ee180181f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:82:9d:e6:20:31:85:55:09:fe:06:2c:81:
52:95:16:fa:ea:b8:8b:df:26:37:cb:4c:f0:15:4a:
0b:5d:47:a5:49:c0:08:ba:d9:d3:38:c1:e2:87:bc:
ff:b0:07:98:cc:5d:02:b8:1d:fe:17:28:3d:ae:62:
70:42:e8:0f:84:44:0d:25:61:a0:49:25:77:8e:8a:
c9:92:fa:a4:9f:00:c2:07:c0:23:25:42:e1:a0:bb:
4b:1c:09:77:b5:ab:03:f4:c9:96:58:f2:f6:90:59:
ba:8d:f5:bc:a5:8b:a2:03:62:3a:79:28:cb:07:0e:
40:cf:24:80:5a:b6:1c:2d:bd:23:61:04:f0:9b:94:
3d:59:8a:58:bc:26:ae:b9:ae:78:c5:59:68:1f:5a:
2a:ff:1a:25:d4:a0:4a:63:87:84:c4:86:22:fd:48:
68:21:ac:c0:f2:b2:14:db:a4:ea:4e:5c:11:54:4b:
a5:ca:a5:93:88:8b:e9:b9:5e:3d:34:37:32:21:ce:
e1:42:ff:d4:a1:d8:00:b8:15:df:d5:66:87:f9:17:
64:a5:cd:6d:d4:63:28:e1:db:54:22:f4:bf:82:54:
59:61:82:17:ed:ec:e3:b3:59:69:50:77:cf:9a:d8:
ce:f3:9a:29:83:16:c1:e0:0b:b3:b9:73:38:f1:0a:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:E6:AF:D3:F9:35:C6:BE:CC:34:F5:40:4B:3E:E1:80:18:1F:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/74c133-7d50-461f-8dba-79fdf65d4914/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/74c133-7d50-461f-8dba-79fdf65d4914/1/Ag_mr9P5Nca-zDT1QEs-4YAYH34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198465
Signature Algorithm: sha256WithRSAEncryption
28:42:20:83:63:c5:0f:bb:fd:a1:23:ff:4a:bd:69:65:a0:f5:
e4:81:85:78:38:ee:c6:87:a1:9f:6b:55:9a:46:3d:de:08:f0:
c4:61:37:ad:98:5f:fe:a3:7a:0e:d1:99:19:0a:d4:11:78:20:
14:a1:92:ac:33:c1:56:2f:93:71:7b:95:94:4e:89:6d:e7:2f:
88:51:5b:22:4f:7d:c2:88:60:f8:de:fe:c5:83:de:19:d1:60:
66:6c:ad:66:5a:41:ee:20:f7:3d:3a:2a:3e:91:cf:36:d0:9d:
79:08:b4:60:54:b8:6e:af:fa:15:be:db:31:60:d0:97:ca:5a:
44:29:9f:78:62:b5:00:e1:89:ae:b7:50:2a:c4:ac:a6:ab:bd:
34:eb:17:ad:df:dc:87:e7:7c:15:ca:ff:1c:99:0f:cc:1d:aa:
1f:66:d5:dc:ec:29:e3:65:dd:5d:4d:2c:48:b2:60:42:cb:81:
c1:9a:2b:b0:eb:cd:da:ff:e9:fb:98:46:0f:35:73:4c:a8:11:
94:31:2b:11:9c:2e:e5:60:e7:0a:69:7c:87:6a:fd:d7:f8:be:
e2:ad:e6:b2:15:c4:88:08:b5:6c:f4:98:6e:26:34:c5:bf:e8:
32:f7:08:d9:2b:b6:b1:c2:88:e9:c5:dd:8c:5b:57:32:08:8a:
e4:09:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:01:46 2024 by rpki-client on console-ams.rpki-client.org