Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IKo_sAxQTBoJEqNJWo49uvPZako.cer
File: IKo_sAxQTBoJEqNJWo49uvPZako.cer (raw, json)
Hash identifier: S6e89J4wb7X81sZ2QD9PppFe4z2xkIgNNMpRTa0J6O0=
Subject key identifier: 20:AA:3F:B0:0C:50:4C:1A:09:12:A3:49:5A:8E:3D:BA:F3:D9:6A:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348C6B6ADB77CAB46F50C4835299EEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205733
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c6:b6:ad:b7:7c:ab:46:f5:0c:48:35:29:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20aa3fb00c504c1a0912a3495a8e3dbaf3d96a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:94:7e:f4:8f:10:4b:d2:92:99:34:e2:1c:
18:f4:15:42:14:d4:3b:ff:29:27:31:ce:01:23:d5:
04:8b:ed:08:0b:73:0e:b8:be:d4:27:f5:b6:5a:7a:
15:96:32:3a:a4:eb:3d:77:be:ad:3e:d0:69:7b:5a:
39:35:e4:20:8d:17:a0:8c:29:c7:6d:ff:16:e9:f7:
c5:94:1d:e7:d3:fc:c7:61:a0:fc:a2:7c:4c:f5:ff:
a3:66:e8:46:40:1d:fd:b4:31:c5:8e:82:21:dd:59:
dc:ad:2f:d0:c4:ee:31:96:2c:d8:15:be:74:24:26:
b2:40:96:0f:fc:ce:d8:40:20:7a:6a:9b:0b:48:be:
31:23:18:ab:e4:76:01:84:47:d0:68:f0:57:a2:2c:
aa:cb:4c:90:b7:1d:78:14:8e:a4:77:07:05:95:35:
6a:80:d3:4a:9a:6d:eb:e3:50:6f:1c:35:80:5f:e1:
26:e3:3e:56:12:09:f0:44:33:a6:94:fb:ba:c2:84:
a4:6f:66:b4:06:48:45:26:7f:98:b7:97:f2:85:ea:
7e:18:d4:eb:7c:2b:62:45:30:15:4e:ca:8d:a2:6a:
ed:36:c0:3f:a0:9e:9e:27:3c:2e:92:08:87:1a:5c:
74:14:9a:5d:70:26:7f:ab:ad:6f:08:1c:c4:da:ee:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AA:3F:B0:0C:50:4C:1A:09:12:A3:49:5A:8E:3D:BA:F3:D9:6A:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205733
Signature Algorithm: sha256WithRSAEncryption
1f:8f:57:ab:20:53:3c:bf:26:18:c4:13:d9:f2:bf:cc:79:a8:
f8:b1:95:ea:6e:6d:c3:b1:63:81:e5:aa:4b:2a:4c:b0:56:ed:
45:b9:ba:6c:0b:99:0f:a0:ce:7b:c4:e4:e2:8c:6b:6e:0c:ff:
63:1e:ce:8e:2d:1f:e9:0c:45:b8:01:62:cc:85:b2:81:c8:f0:
bd:65:81:ca:e5:a4:84:47:ad:cd:3a:19:11:65:2b:a6:f1:71:
3d:04:4c:27:83:ae:11:da:33:29:f6:a6:62:17:68:81:63:be:
33:66:e0:94:57:1d:e4:6d:01:d2:62:b7:f9:89:fc:26:d9:07:
cb:23:1a:61:77:26:01:27:8b:2f:d5:bd:a4:6d:f3:92:df:8d:
4c:09:69:6d:24:89:c2:60:68:45:2c:62:a6:30:f9:96:fd:a5:
38:76:31:d6:78:34:a1:29:9d:92:11:08:4b:61:12:de:f1:32:
f1:c4:eb:b8:74:8a:74:fc:3e:76:7a:f8:c1:49:4a:9e:a4:b1:
3f:0a:94:46:e6:2d:23:a0:da:f8:b0:a8:52:f4:52:f4:72:f5:
2c:2a:3a:4c:fd:31:71:1c:fa:6b:12:66:3b:f6:2b:58:35:8e:
75:9b:cc:fd:cc:0e:8f:4c:45:92:dd:e1:2e:99:4d:53:5d:8d:
bf:56:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:39:35 2024 by rpki-client on console-ams.rpki-client.org