Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GgEVsAAialzJ-J3W8b2K4qxXzEY.cer
File: GgEVsAAialzJ-J3W8b2K4qxXzEY.cer (raw, json)
Hash identifier: HL5YVe3EfeWpsFMgoeO+LDzd2Wc6v9VfJA9fGjTmZdY=
Subject key identifier: 1A:01:15:B0:00:22:6A:5C:C9:F8:9D:D6:F1:BD:8A:E2:AC:57:CC:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EF811E722376A0E7BDE1616D8CB3B2520
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 19 Apr 2024 20:35:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60223
AS: 215580
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f8:11:e7:22:37:6a:0e:7b:de:16:16:d8:cb:3b:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 20:35:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a0115b000226a5cc9f89dd6f1bd8ae2ac57cc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:9c:fd:58:11:b7:60:78:e0:59:b0:b1:9f:
28:6b:f3:c9:44:a8:98:db:01:bf:7c:38:7e:24:26:
60:10:f9:f2:8b:46:31:75:f0:f9:af:33:58:eb:13:
9e:80:a3:f9:62:4f:8f:9d:31:99:9a:7b:91:0e:59:
35:12:4b:96:6b:a9:65:75:f0:90:22:0a:22:21:2a:
1c:79:ee:d3:8a:00:c7:4f:c4:24:09:97:8c:ff:4c:
e9:2d:19:74:e4:f7:7a:bb:96:2d:35:c8:77:7b:aa:
30:92:27:4a:31:1b:02:e8:2f:f7:9a:84:78:a2:d1:
e4:8c:db:fd:65:16:d7:21:a1:26:b0:3a:8a:e6:c6:
e2:b3:82:ff:45:d0:91:ee:62:53:a9:01:00:26:91:
3d:86:76:db:60:6f:4b:4a:26:20:46:6a:05:f7:0e:
c1:3b:7c:ac:b1:08:0a:83:bb:0c:ae:91:cb:bc:00:
ad:69:b5:28:47:7c:10:ea:d6:98:39:d9:f1:4a:6c:
df:32:8c:97:63:b8:f7:e0:10:9c:ae:11:35:39:31:
8f:2c:1f:5e:fb:48:28:7b:89:a4:85:96:28:69:00:
24:62:9c:44:69:4c:fe:8e:72:0b:6f:00:52:3c:09:
47:8b:b2:de:35:ff:0b:c8:7a:aa:80:9c:d9:7f:be:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:15:B0:00:22:6A:5C:C9:F8:9D:D6:F1:BD:8A:E2:AC:57:CC:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60223
215580
Signature Algorithm: sha256WithRSAEncryption
a4:59:d8:7e:95:98:e3:f6:4d:d9:f1:18:c9:2d:45:96:4f:05:
b5:5d:34:9b:51:38:75:14:e7:67:f7:46:22:ab:48:94:24:c6:
72:62:29:5e:32:2a:2a:41:d2:90:82:17:91:ab:f6:a9:9a:53:
eb:71:46:36:59:ed:6d:b7:b4:73:a8:39:80:bc:b8:d7:98:f1:
65:49:5d:7a:69:13:26:fa:a4:12:c9:98:a6:4a:04:6f:60:95:
86:e0:b5:6e:10:7e:2e:1a:c5:f2:a4:e4:18:5e:1b:b6:9a:b7:
88:95:5b:e5:b0:75:9e:6a:c4:fc:02:06:62:d4:d3:f6:00:7c:
ab:f5:e9:80:39:58:23:01:3c:65:f3:b6:2e:cf:8b:2b:a4:31:
aa:4f:5c:00:fc:fc:5b:d9:ce:74:2c:4c:5d:4d:ac:5e:46:35:
97:0d:f6:43:b9:05:cb:69:5c:bb:60:d6:4d:dd:35:cb:f5:2c:
e5:5f:4f:45:a7:58:e7:dc:f6:f6:70:93:1c:4a:57:dd:cb:42:
28:f0:7f:ae:8c:ea:28:02:1f:fc:0e:72:36:b3:9f:d3:13:f3:
2c:f0:37:cd:84:5c:9d:fa:54:b2:e3:ba:ef:11:60:77:07:1d:
55:74:93:fc:13:b8:96:d3:1e:ac:78:d5:00:ca:3f:25:f7:a1:
43:b3:5b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:53:49 2024 by rpki-client on console-ams.rpki-client.org