Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FBxyOMCfG6TRJON73uZPglqi9rU.cer
File: FBxyOMCfG6TRJON73uZPglqi9rU.cer (raw, json)
Hash identifier: Wvla2qHjQgJynr0c0X3/StvSY/Xd9SYZudR1ohYyg7U=
Subject key identifier: 14:1C:72:38:C0:9F:1B:A4:D1:24:E3:7B:DE:E6:4F:82:5A:A2:F6:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B92F8D73CE76528562EE69BF69F674
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51656
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2f:8d:73:ce:76:52:85:62:ee:69:bf:69:f6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=141c7238c09f1ba4d124e37bdee64f825aa2f6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:b6:e5:e0:75:e2:60:7e:48:02:d1:61:80:
02:07:20:7e:f1:8e:a5:fd:31:71:57:e1:84:60:02:
9f:80:1c:d5:aa:c9:79:f6:d6:91:a6:fe:13:9f:96:
75:fc:5b:af:4a:1d:90:eb:88:34:41:ac:25:d4:e4:
f5:17:0e:b5:25:a3:b0:0e:74:25:5b:27:38:8f:ce:
be:b7:be:55:b7:ce:74:5a:63:dc:4b:b2:62:f7:4b:
45:91:05:f0:4f:a5:fc:2f:5f:af:da:99:eb:7e:84:
83:84:55:4b:2d:1a:d9:07:50:4a:5b:a0:f4:06:06:
ef:2b:d2:76:16:2e:79:1e:b8:81:08:84:3b:74:95:
04:1c:4b:e6:ed:6b:58:7c:fa:3f:90:3a:43:92:41:
5c:ac:43:63:fc:36:9e:79:b3:6e:88:0b:aa:de:fc:
c1:a4:ef:ec:d5:1a:81:54:0d:3c:9d:07:bd:7a:c4:
5f:26:e2:f9:f6:02:c4:d5:26:92:5c:38:77:c2:d0:
d4:af:a3:a6:01:28:fa:dd:dd:e6:89:40:56:87:90:
c0:67:da:a1:b6:da:38:8e:b4:5b:3c:17:fc:d9:aa:
81:4e:de:f8:76:7f:60:8e:1c:eb:63:b5:4f:3d:a0:
42:6a:d2:24:35:3d:f0:d9:87:bc:6f:fe:a7:0d:5a:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:72:38:C0:9F:1B:A4:D1:24:E3:7B:DE:E6:4F:82:5A:A2:F6:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51656
Signature Algorithm: sha256WithRSAEncryption
a4:bd:f6:10:85:f7:f3:66:95:85:f3:8d:14:c1:ce:01:63:c2:
a1:f4:c2:f3:fb:37:e1:12:62:8f:ed:ba:c6:1f:c9:01:3b:09:
e8:e4:44:5d:f8:d8:ca:2e:2e:66:df:78:0f:9a:23:c7:2f:f9:
b7:37:0b:f4:3a:b9:d7:bc:cd:c2:f4:91:78:2f:62:27:32:ab:
a5:5c:a5:1d:72:95:53:e3:07:9e:5e:0c:c3:2b:96:31:81:61:
1e:cc:0f:25:dd:bf:24:29:8d:c8:9a:72:7b:7b:b9:0b:ea:2a:
2b:7a:86:6e:48:89:eb:d0:f9:49:30:60:5b:cc:9e:bb:65:90:
1d:fa:bc:d8:9c:8d:48:1c:1a:ba:9d:17:8a:0e:ea:67:f4:e9:
1f:80:82:21:6e:59:65:10:f1:fc:01:ff:a8:0f:bd:6f:72:de:
d1:f3:80:08:eb:2a:ab:c4:d7:c8:b0:57:b9:0e:0b:7e:69:d1:
fd:5d:de:7f:e4:9f:ff:b2:0f:ba:89:a0:bc:4c:1b:ab:b8:99:
d7:e4:3c:48:15:f2:eb:3b:e4:7b:b2:1d:ae:ed:85:ea:36:1f:
81:4a:6e:26:19:ff:84:07:6d:1c:a4:7e:8e:ed:9c:15:80:b0:
4f:f3:a8:17:33:98:e3:19:b3:de:9e:0f:43:63:2e:9a:47:86:
59:5d:9d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:02:59 2024 by rpki-client on console-fra.rpki-client.org