Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IInyGLYJHgA8yVGa-JSqojzdjEI.cer
File: IInyGLYJHgA8yVGa-JSqojzdjEI.cer (raw, json)
Hash identifier: QfU/bQHThpkt/R7ulCHuIKNJ/X4YBFQwDPnKMvSwceE=
Subject key identifier: 20:89:F2:18:B6:09:1E:00:3C:C9:51:9A:F8:94:AA:A2:3C:DD:8C:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192675F35F30C43131F80681FC3A410ACC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Oct 2024 14:25:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214129
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:5f:35:f3:0c:43:13:1f:80:68:1f:c3:a4:10:ac:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 7 14:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2089f218b6091e003cc9519af894aaa23cdd8c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:47:9a:e7:19:ed:33:cd:23:79:03:45:ca:
d3:71:33:f7:46:85:78:bc:88:d8:5b:a4:dc:f9:ce:
a2:fe:92:6b:75:5d:34:fa:dc:95:da:85:db:86:2b:
ca:8b:dd:09:1f:8f:39:02:47:e1:85:a9:8d:80:f1:
ca:32:56:f7:41:28:b8:b3:78:aa:8a:52:04:b0:06:
6a:70:19:68:89:aa:6f:4f:a3:04:32:46:e1:6d:9b:
1f:42:94:2d:76:1b:cf:0d:34:8d:1d:ad:99:a9:32:
2a:5d:d4:7a:e3:07:5a:e3:f8:b3:7f:0b:f0:73:4f:
1d:b3:32:03:64:57:5a:45:5d:79:ba:89:10:7e:af:
81:1a:cb:d4:8f:6b:72:01:5b:3f:ad:a0:1c:1f:70:
45:a2:c8:03:cb:21:a9:a9:bd:75:1a:c7:d1:6a:c9:
93:52:e1:d8:39:e8:55:51:80:8a:32:3f:31:43:02:
2d:40:d9:50:5e:73:38:33:ec:ea:57:f1:ed:c1:e0:
d2:4c:e3:52:34:bc:56:3d:ef:c5:86:d7:3f:b2:fa:
71:06:34:4e:3e:7a:56:1d:8c:57:c1:28:a8:6d:35:
09:83:33:a6:5c:af:04:e1:59:45:b6:69:76:ea:bc:
60:df:34:92:ef:5d:95:b9:da:31:5c:05:b1:08:5d:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:89:F2:18:B6:09:1E:00:3C:C9:51:9A:F8:94:AA:A2:3C:DD:8C:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214129
Signature Algorithm: sha256WithRSAEncryption
83:30:dd:97:69:a6:a2:51:54:4a:18:70:4e:a9:f8:a6:9d:5e:
b2:bb:91:fd:9a:43:83:bb:ab:ba:67:96:14:09:d2:9e:71:6d:
39:15:83:fb:a5:31:cd:d4:bc:2f:5d:72:4d:24:89:49:08:40:
eb:67:71:84:62:5d:6c:02:03:2b:1c:55:2d:d0:e7:68:0a:3d:
ac:22:c9:8d:b1:e1:52:40:86:bf:07:07:12:b9:1b:28:a8:87:
e4:16:fa:33:ad:c5:2c:71:dc:f1:d1:83:b0:b6:99:0e:09:7e:
87:13:df:84:9e:01:2c:5d:58:f7:55:ae:dd:9e:7e:aa:c2:cc:
07:57:a6:9f:67:ac:de:43:22:11:56:e9:ed:28:0b:59:4d:99:
9e:dc:06:91:cb:87:21:0a:2a:63:dc:12:71:86:fd:40:ec:5c:
d9:77:79:a1:7e:f5:38:96:c0:d8:a4:f6:b6:15:87:59:5b:55:
a0:3b:f7:e2:f1:bf:35:01:34:4d:0c:16:fd:71:11:18:28:c0:
b8:d0:4d:93:03:ca:98:85:6e:61:25:11:64:8c:22:19:4e:9a:
07:86:3a:b0:7a:4a:73:18:9f:13:ef:e4:e8:3d:30:f1:3c:f9:
23:08:c6:37:0b:72:72:b9:5f:36:62:a6:15:b5:4e:62:9e:2e:
8a:68:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:06:14 2024 by rpki-client on console-fra.rpki-client.org