Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer (raw, json)
Hash identifier: CMZjGBk39t4x5fQct1NWER65cFj83QpWIS9Bh44QgNM=
Subject key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7ADE9FBAE7D6EDB9CCC58D811990E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202201
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ad:e9:fb:ae:7d:6e:db:9c:cc:58:d8:11:99:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:31:34:f7:96:25:b4:1e:b8:9a:bb:ea:a6:
96:7f:32:6a:3e:59:40:40:8e:a1:5c:35:2f:ce:67:
b9:02:cc:98:a2:9c:65:ae:23:15:11:7a:82:58:50:
06:9d:46:4b:7c:98:4e:d4:3f:05:e9:ad:f5:ca:c1:
93:ee:a2:fd:86:94:f0:26:63:98:85:d1:e7:bf:d3:
e8:10:b0:04:4d:a6:15:98:d9:45:6b:15:71:e5:c3:
f7:f3:d1:83:c9:da:9d:90:19:06:81:0f:83:bd:d4:
15:5a:f9:a9:d4:62:ac:3b:f3:8e:e4:18:9c:a5:be:
48:01:19:7f:83:37:34:81:22:4c:99:2c:3d:59:fb:
48:97:9c:e0:87:82:42:22:99:bb:50:ad:85:9e:36:
06:86:3b:21:e3:97:b8:02:09:21:aa:e8:b5:63:b6:
f8:61:b2:a1:1f:75:d9:b8:2a:05:d3:b1:06:a8:18:
44:cf:b5:a3:fb:7f:78:88:0b:73:7c:02:d3:bf:2a:
ff:e5:d7:15:7b:2c:ae:9c:62:84:61:26:9a:b5:e7:
fa:12:2c:53:ad:22:11:be:e8:ca:2a:77:8d:f6:27:
27:39:da:4a:35:fe:ea:d6:bd:e9:b8:e2:4f:ea:ba:
1d:10:07:4a:41:5c:d5:d3:99:53:c0:06:bf:93:c9:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202201
Signature Algorithm: sha256WithRSAEncryption
68:68:e9:97:37:2d:f7:f8:20:42:ed:44:5d:b0:cd:14:21:36:
e1:d0:3a:dd:b0:64:7e:c0:a7:41:43:ef:d9:aa:be:38:44:05:
92:31:9c:84:a3:0f:f3:76:9b:0a:9f:c2:c1:11:6c:eb:45:15:
23:8f:4e:5e:d4:98:d5:1c:3f:31:69:b6:79:a7:fb:bb:27:d4:
a0:50:42:b4:5f:2c:25:7e:88:5b:4a:ea:c6:c8:e6:c7:6e:49:
ba:fc:65:a2:4b:1d:88:0f:9b:f0:78:d6:20:03:96:df:f6:fd:
e1:a0:90:53:33:c7:b9:00:ef:17:20:c7:42:4a:a5:76:d2:3b:
22:12:f2:40:30:d5:14:0c:ad:85:bb:5e:2a:f9:27:fc:49:9e:
fe:d6:ff:b2:be:99:d5:ff:9d:10:d9:d1:d9:77:d8:56:44:4e:
b3:ab:97:82:42:9b:39:21:cf:b9:2d:0b:5b:76:88:b3:3b:81:
82:bb:b2:e8:51:02:d0:db:a4:78:62:85:a9:c5:25:be:45:28:
2d:cb:a7:06:53:92:c0:74:6b:d0:10:d2:35:f7:a7:a6:88:48:
bc:04:22:8d:15:06:83:19:b7:b5:82:8c:09:10:69:a9:df:6f:
fd:76:4a:d5:0e:7d:15:8a:ed:16:82:fc:56:50:ad:b5:39:a5:
1b:a2:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:56:46 2024 by rpki-client on console-ams.rpki-client.org