Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer (raw, json)
Hash identifier: pVHxyfhRKoBKR0hWoW71j4nMh//69e/xI0Fm6Zl4j+k=
Subject key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348ECA7A2401CB712205C40C9AC45A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203871
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ec:a7:a2:40:1c:b7:12:20:5c:40:c9:ac:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:7d:58:38:5e:9b:5c:03:57:e0:03:19:d4:
43:ef:13:4d:8e:ed:8d:94:7b:51:19:6c:1e:40:b4:
0b:3f:08:c3:cb:ab:89:e8:c4:4d:d4:72:96:be:8c:
22:ee:ad:9f:b8:16:95:1e:d7:ce:90:07:12:95:59:
71:73:95:42:88:9d:f8:51:50:a0:a6:9a:c8:bd:b9:
05:1c:db:6f:35:26:03:66:fc:57:bf:08:16:fe:69:
85:d2:92:02:80:40:84:d5:2f:8c:7f:e6:4f:42:ae:
53:75:04:27:18:00:86:cb:7f:cc:c3:30:90:16:28:
88:67:1e:62:88:74:df:cd:f9:37:66:0e:4b:b4:18:
56:05:e8:b3:2e:1f:f0:58:34:75:b9:b8:7a:37:d2:
2e:f6:d0:0c:52:bc:16:da:26:26:d9:df:f5:51:1f:
68:67:01:44:ea:97:8e:8d:83:0e:d3:68:c0:30:e0:
97:7b:56:2d:e5:ef:7c:10:45:08:85:2e:24:14:9b:
8c:67:d5:23:90:03:b7:c3:8d:80:01:e5:55:67:ea:
61:b4:47:1f:a3:b7:7d:ce:e9:54:c9:10:b5:3c:3e:
59:5c:cf:98:d5:34:a7:05:a0:56:d5:68:0a:90:c7:
52:37:00:ac:bd:8f:01:e4:87:64:90:d7:a7:57:22:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203871
Signature Algorithm: sha256WithRSAEncryption
94:e6:46:03:72:2f:67:4b:c9:61:04:6d:41:23:c2:8d:f4:88:
9a:15:01:f1:f3:ca:da:1f:45:4e:93:da:3d:98:dd:7a:71:6c:
21:d1:e9:a8:3e:47:0b:4d:5b:9f:51:e6:6b:f1:7e:53:98:4b:
91:35:5e:b1:50:74:d2:4f:82:2b:42:50:3d:b4:fe:1f:3c:10:
e4:82:d1:d5:b3:57:3f:b2:a9:df:24:3f:fb:e9:99:fa:90:dc:
e7:97:76:c3:4a:e5:c8:1c:86:43:bb:7d:f5:bf:95:b2:98:5b:
39:ec:be:64:8a:9a:34:23:2f:8a:fd:0c:be:bc:4a:7d:4f:6a:
46:ff:14:8e:bc:c6:86:3f:3a:7f:33:16:8b:6e:ac:98:fc:9c:
ba:4e:1b:37:d7:b2:79:2e:ad:f7:62:f0:a3:ee:24:b8:28:5a:
6a:69:5c:0e:f7:80:44:f5:d4:2f:8a:98:3b:d3:42:3e:c1:93:
2a:69:6b:03:d3:fe:3b:d5:66:e0:15:b6:89:81:ea:4d:4a:03:
3c:35:f6:92:7a:fd:a7:c4:7d:c8:98:86:d4:0f:a7:c1:54:58:
ef:54:76:fd:cd:47:06:c9:e3:70:5a:48:94:58:af:ec:5f:ae:
a3:51:66:de:8f:cf:0a:30:5d:08:4e:40:9d:6e:a0:f8:c3:79:
e6:6b:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:58:36 2024 by rpki-client on console-fra.rpki-client.org