Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
File: GGr6K4fO01gj1aLMCghE56FRa_M.cer (raw, json)
Hash identifier: 9HBVr3kZIW2RgqLEwLxCRPze+1jNtx2lQq0nYEXISV4=
Subject key identifier: 18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF74F5118966C3381F31EDAECF1439
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207485
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:74:f5:11:89:66:c3:38:1f:31:ed:ae:cf:14:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:cc:8d:86:7e:02:ba:03:40:8c:3d:5d:e8:
bd:ac:af:12:7f:d9:91:7d:30:2d:a1:7e:e4:ea:9e:
bd:54:46:9a:93:c6:e5:bc:77:f0:87:eb:6a:82:da:
24:d6:dc:71:16:5c:b7:fd:f5:ed:63:ca:cf:d1:f1:
7a:fe:ab:3b:42:70:7a:36:79:3f:58:8f:8f:fc:40:
91:c8:6d:b5:36:63:01:ca:6a:ee:1f:50:ba:27:33:
c5:70:a5:fd:eb:6a:86:06:36:e7:c3:19:be:7c:d4:
55:58:43:5c:ad:28:80:d4:92:78:9a:69:c6:d3:a9:
84:38:97:91:1b:d4:07:7e:ad:1d:7f:e2:60:f6:86:
71:bc:93:5b:9b:71:c4:79:6d:04:d3:19:54:8a:df:
d7:0e:8b:2b:84:c3:69:1d:2f:33:76:82:54:02:6a:
4b:8e:63:5c:32:14:38:f5:52:4c:22:71:68:73:bb:
16:7c:d9:06:cc:ea:72:5d:5f:28:df:05:ab:90:8d:
11:f2:df:82:15:22:ba:21:50:93:2b:20:0f:94:7b:
a0:41:30:f3:ff:65:b6:1a:23:47:0d:f3:d4:b0:a0:
e8:5b:c6:33:b5:80:e4:ad:03:ca:a9:92:b1:9f:4c:
79:75:a6:38:f9:a1:9a:18:f5:86:a7:34:78:d2:82:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207485
Signature Algorithm: sha256WithRSAEncryption
97:36:5f:4d:62:c2:2e:db:aa:76:ab:79:85:b2:eb:7a:13:de:
d9:c1:7f:b2:d7:a3:55:56:09:52:f0:1f:4a:d6:12:c2:45:1d:
1d:05:84:c7:a4:72:a9:01:5c:55:f1:a1:14:02:0f:53:bf:32:
8b:0f:dc:a1:e5:63:99:15:78:49:cd:41:2c:48:9f:ae:13:bc:
4a:82:85:c3:a9:7b:4f:f5:55:ea:f7:2c:43:df:fe:59:38:94:
b2:49:41:ec:94:87:15:36:c9:07:db:79:2c:8e:58:0d:78:04:
54:01:aa:06:8a:1c:3c:13:fc:6d:1b:83:67:58:02:74:71:55:
58:c2:e5:14:10:03:0b:ee:c8:45:f1:ae:70:5b:7d:7a:7c:6d:
ac:ec:71:c7:94:ad:8e:ad:8d:34:6a:47:ab:1a:3e:f7:33:01:
da:6b:37:c3:ba:e0:d8:b2:04:65:50:b1:17:6b:b3:9e:34:8f:
3a:73:ea:f1:a3:78:28:64:f3:20:4a:d4:00:9c:98:4f:57:87:
9b:23:4a:4a:93:f0:b9:c4:12:88:48:52:0b:a1:72:1a:c0:92:
a9:9f:de:41:73:43:cf:84:1b:ac:b0:01:c8:c7:4a:10:4c:5d:
aa:9a:15:88:22:e2:4b:1f:14:dd:05:ef:da:33:b0:d0:3b:91:
23:3b:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:00 2024 by rpki-client on console-ams.rpki-client.org