Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
File: F1oeMrvmeal2_GGmA-3NalQHK48.cer (raw, json)
Hash identifier: oZtnXqWscXDDu8/NMya7M0m0agcCCZOl9wFKRGF7+no=
Subject key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F089E4750C586169E879FAC1F51962166
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Apr 2024 01:42:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215087
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:08:9e:47:50:c5:86:16:9e:87:9f:ac:1f:51:96:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 01:42:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:22:65:3b:46:5c:05:e7:97:74:62:16:c0:
47:b7:70:e8:62:d2:8a:b7:8d:4a:83:4d:a5:d5:e3:
f6:0a:5a:b4:29:90:55:ee:27:1a:71:f3:7a:f1:5b:
a8:b3:78:15:78:e6:5a:a5:65:d3:97:1c:ee:8c:42:
6e:6e:d7:10:40:7b:63:fe:df:d5:9a:c6:49:27:b4:
33:1e:d8:68:bd:56:a6:46:6e:cb:ab:1f:c6:31:95:
ba:cb:0d:99:9d:8d:fc:a7:8d:85:d7:8c:31:90:34:
71:f0:33:07:ea:f4:6b:6c:cb:39:cd:6f:9c:b0:60:
20:42:ce:28:9b:cb:94:a9:41:a9:c3:64:59:35:6b:
8b:fc:25:00:8c:e4:ab:f4:77:da:15:85:fb:12:f7:
67:fe:46:eb:0a:78:ea:1d:c7:55:b2:cb:9f:21:5a:
76:cc:38:d0:21:b5:7e:c3:7f:d6:2c:f4:19:4c:6c:
cb:7b:18:3e:79:64:be:75:7e:d0:d1:6a:52:72:9f:
71:a8:fa:dc:e6:6b:0b:16:f3:23:7e:95:02:b9:f1:
cb:9c:29:3e:da:7b:7d:88:fe:86:69:36:02:65:f7:
92:8c:e5:57:16:b5:8c:a6:1e:de:fd:eb:0d:bc:78:
c1:00:74:cd:bc:71:c1:23:94:00:fc:96:2d:59:73:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215087
Signature Algorithm: sha256WithRSAEncryption
6c:c9:57:6b:97:78:a5:09:1a:be:90:88:bf:5c:fe:0f:9e:85:
e3:2f:eb:a1:85:50:22:a0:67:99:35:67:41:6a:30:47:61:04:
c2:6e:ff:84:8b:af:53:70:10:04:f5:29:b4:4c:12:91:f8:c1:
f0:e6:e2:6d:2f:69:8e:d0:80:87:57:1e:e0:19:27:bb:ef:03:
f1:75:ef:fb:0d:c5:cc:79:05:22:e2:33:96:a1:3b:91:14:2c:
2f:0e:7a:6f:7a:e4:09:a4:b3:67:09:be:46:51:01:f3:a1:04:
28:3a:75:ae:c9:72:3b:49:76:22:a1:b2:2a:82:14:19:15:e6:
2f:9e:65:7a:0a:28:03:2c:a3:e0:f4:60:49:63:fb:7d:5e:03:
52:a8:de:ae:f1:94:c9:b3:a3:8c:d2:04:ed:76:13:6b:e5:06:
0a:1a:b4:f2:89:27:0f:e6:0d:77:48:d1:84:a2:64:91:06:c2:
16:24:75:4f:e6:ae:ec:51:5a:ef:d1:db:bc:61:44:41:39:71:
03:ae:61:ce:e7:16:48:f5:89:35:37:54:34:46:52:dd:ea:37:
f4:93:16:27:e1:e9:90:9c:b9:64:9e:a1:d2:85:ea:c2:43:74:
8b:6d:f6:85:15:08:2a:2e:96:47:58:00:bc:62:b2:3e:6c:3b:
b2:9a:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:59:51 2024 by rpki-client on console-fra.rpki-client.org