Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
File: CS6YqFX-4C89_wcy1-GHkvOv92c.cer (raw, json)
Hash identifier: adx2yMtG/LC6V1nMZptSU7gzE0wp0FeyUiqlDm0Fx9s=
Subject key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F9B8199DDF429F7D5947247900C12E491
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 May 2024 14:15:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44446
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:81:99:dd:f4:29:f7:d5:94:72:47:90:0c:12:e4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 14:15:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:f3:26:aa:73:68:22:67:b1:2b:45:16:b0:
48:02:d3:71:33:d5:d4:0b:36:b9:1f:9a:d7:b2:41:
56:c0:79:5e:c5:c7:0b:11:ce:bf:35:88:0a:1f:3c:
02:eb:51:aa:e3:94:71:95:f9:3a:1b:46:c6:ca:0d:
09:87:ae:bc:02:e6:ee:0e:82:17:98:46:18:47:47:
70:54:e4:67:4c:c5:16:07:c8:b7:ce:22:95:ab:89:
46:d5:e2:e5:9b:bb:80:69:2c:a0:92:fa:f0:41:49:
00:30:2a:7b:b0:cf:68:11:91:bf:79:e6:76:3c:bd:
cb:d1:e8:40:cb:7f:50:45:c1:7e:ef:35:a7:58:43:
87:e8:57:37:3a:d2:92:2f:3d:71:eb:96:12:cc:70:
fb:4a:ed:3d:0a:e9:51:a0:6f:79:ea:96:4e:b7:54:
32:52:dc:d2:49:a7:4d:c9:d0:00:49:72:e8:ab:4d:
2f:6f:62:94:9f:4c:c1:95:3d:f3:12:46:cf:f6:8b:
8f:6b:f7:7e:70:76:23:a2:29:f8:11:a4:fa:08:c8:
e4:3c:46:57:2f:75:86:1e:d9:f5:46:42:dd:f5:ab:
62:5d:ad:88:11:3e:17:fe:d7:a6:b3:10:0e:98:46:
a8:e7:fa:00:df:6b:5a:ac:47:9c:ae:9e:03:af:15:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44446
Signature Algorithm: sha256WithRSAEncryption
11:69:6e:0c:26:8b:74:49:f4:e3:d2:2d:28:c5:5d:4d:92:84:
49:ae:de:b8:99:1c:ce:3a:ef:6d:0d:13:1b:3a:82:d0:5b:2a:
e2:05:fb:72:b9:3b:40:5d:6b:87:9e:c8:eb:57:e5:6b:9f:c2:
1a:ce:3d:38:8b:df:72:11:d4:58:11:65:78:d0:36:e1:57:2a:
8d:20:30:c9:ca:ff:50:9d:87:c7:d7:17:e6:30:2c:13:34:00:
46:d9:76:dd:d9:15:e9:40:41:c6:26:dc:0c:90:ef:d7:db:5a:
9a:d0:1c:10:27:03:56:43:a4:b1:d0:6d:a2:c4:e1:39:00:3f:
69:33:f1:b1:0d:41:e8:0d:93:1b:0e:db:3d:fb:9d:24:cc:4f:
09:4d:6b:0c:75:76:eb:41:53:e2:71:84:2f:05:e4:36:bf:d8:
5c:d6:6c:54:b7:68:a5:59:e9:2c:e2:90:1c:b4:d3:f0:fb:37:
b6:ea:71:4a:2c:16:6a:f5:d3:9e:5b:ea:0b:02:e6:0e:96:57:
a4:6c:a3:1a:a8:88:74:fd:3c:89:65:67:35:08:c7:8e:67:b0:
ec:44:2c:e0:4e:70:fd:26:0b:48:e6:14:be:bf:14:20:25:98:
ef:c5:5d:9c:72:3f:56:da:7e:82:35:0a:b3:f5:86:b3:1b:80:
7b:8c:63:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:09:16 2024 by rpki-client on console-ams.rpki-client.org