Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
File: F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer (raw, json)
Hash identifier: CIWL5rwOSvOweZDi+zXY+U4v3SG1WzUeTMngou+p41w=
Subject key identifier: 17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7C141ACC16B4C721FF9F3F89133E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210576
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:c1:41:ac:c1:6b:4c:72:1f:f9:f3:f8:91:33:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:41:4b:90:ea:c2:0d:83:54:f2:47:93:8f:
33:f5:b4:02:05:1b:71:26:5c:06:18:c1:e4:96:37:
54:4b:14:31:e6:9e:d2:b7:11:03:dc:93:06:ea:4e:
a9:48:34:f1:60:5d:02:52:ac:4a:ae:44:e9:09:5b:
e1:ae:f8:5a:67:f6:83:54:9c:c3:24:2e:db:f8:b8:
3b:e5:73:0a:0b:1b:95:22:62:14:3d:62:0d:e3:42:
d2:6c:63:8d:88:e6:7e:54:8b:f1:0c:8f:30:58:9b:
92:12:20:c5:1b:38:1e:61:86:4f:f3:e8:48:11:1a:
e3:61:5f:ae:38:24:82:25:f5:03:34:a4:1f:fd:e2:
d3:65:93:8c:95:07:e7:98:08:b9:29:d5:c5:49:e6:
45:0f:9e:8a:9b:49:16:f5:fe:11:7e:d6:fd:ab:a9:
72:3e:f8:4b:65:bf:de:f9:5d:2c:a0:7f:7b:71:06:
8a:82:85:6a:d2:b9:28:d2:9a:ad:bc:f1:02:94:e4:
50:dd:e3:3d:74:4a:bf:10:e0:1f:82:c5:1e:5d:8d:
ae:6c:2d:a1:4c:dd:e2:20:72:9f:95:13:c1:44:f8:
08:d5:4b:f6:3d:5d:04:19:0f:1e:2a:63:ca:98:2f:
04:78:de:20:f4:c3:54:a7:43:6b:01:89:da:f6:f1:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210576
Signature Algorithm: sha256WithRSAEncryption
40:fd:17:81:1d:ac:10:46:69:2c:7a:d6:27:dc:68:f5:c8:13:
87:eb:d5:74:bd:27:0b:a4:6b:da:69:ff:d8:e8:b6:e8:4f:c6:
b9:d2:3a:6a:c2:9c:eb:08:e2:af:3b:6e:36:b5:29:69:5f:a7:
71:de:67:d3:fd:29:f9:82:6b:98:be:b0:cc:f6:0f:89:2d:84:
36:31:a0:ca:88:26:df:4d:99:1c:db:92:e0:42:d1:8a:cf:08:
4c:fb:33:77:86:f3:89:c6:fa:43:2c:50:4c:6b:7f:b6:43:67:
94:60:6a:1a:b1:41:43:43:54:b1:5c:55:eb:8d:9a:f4:b3:ea:
d4:08:db:f0:55:dc:67:58:d7:32:04:1c:73:c5:5a:58:61:c8:
c6:a7:e3:53:9c:ee:f7:15:74:a5:96:b4:9b:2d:99:5d:47:d4:
13:e1:d3:b9:a6:5f:d2:84:0c:94:ad:fe:82:dc:e2:f1:11:b1:
36:1b:52:4a:b2:6e:0d:e7:3b:60:1d:04:ae:d7:05:af:0f:71:
84:0b:0d:56:2f:1d:92:13:a3:fc:0b:46:a1:01:02:24:80:28:
f1:64:c9:14:2e:55:f9:c7:4d:81:54:6a:fc:e4:35:d8:51:80:
15:93:79:5d:9e:60:cd:c0:35:e8:74:ab:03:b6:87:34:1f:1c:
86:38:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 19:42:15 2024 by rpki-client on console-ams.rpki-client.org