Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ihw_8dO6vg2JEVmmOCbRThH6PsM.cer
File: Ihw_8dO6vg2JEVmmOCbRThH6PsM.cer (raw, json)
Hash identifier: Gg3seEiwaTUXF1WdQtYCmzdr3m6PM+h1TkbCUYqm/wg=
Subject key identifier: 22:1C:3F:F1:D3:BA:BE:0D:89:11:59:A6:38:26:D1:4E:11:FA:3E:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC666B0522DCB9572817E3DE37F1EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/Ihw_8dO6vg2JEVmmOCbRThH6PsM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205417
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:66:6b:05:22:dc:b9:57:28:17:e3:de:37:f1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=221c3ff1d3babe0d891159a63826d14e11fa3ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:89:6e:55:67:ed:54:16:4f:ea:b4:01:cc:
2b:a7:ab:fc:81:85:86:75:ac:80:0d:48:19:9a:cf:
f4:99:2f:ba:d8:4d:1f:da:e0:5b:66:85:a7:88:f0:
04:89:be:3d:e9:fc:a1:44:87:6b:04:18:46:c5:74:
df:94:25:5c:c7:f8:66:98:94:23:3f:1d:fa:81:36:
d8:bb:28:f3:ce:4d:76:d4:6d:f3:6d:1e:1e:96:2c:
18:82:bb:26:fb:3e:1c:04:51:35:aa:53:4c:be:84:
69:79:88:fd:03:a6:18:59:61:fd:c7:aa:66:0e:e0:
ff:7a:a3:9d:6e:52:94:fb:4d:f0:39:0e:c3:c3:4f:
0c:8c:8d:db:43:7e:1b:0a:1f:13:48:ad:0c:30:57:
c2:40:67:fd:1e:ef:12:a6:50:f1:e7:96:bb:f5:6e:
02:a0:c9:f1:1b:cd:13:b1:1a:44:7c:c2:e9:b1:27:
e0:04:e6:79:3a:02:54:7a:ed:43:2a:69:5d:44:fc:
29:4f:ce:c8:de:0f:65:58:66:45:88:6e:02:c6:3d:
8e:99:32:ee:60:7f:c4:f0:9e:b6:d0:00:65:1e:db:
f9:58:a7:2c:8e:6a:57:20:9c:7d:c8:6e:be:89:fd:
92:00:a2:fc:b6:68:f7:f0:80:26:f8:dc:b5:ac:83:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:3F:F1:D3:BA:BE:0D:89:11:59:A6:38:26:D1:4E:11:FA:3E:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/Ihw_8dO6vg2JEVmmOCbRThH6PsM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205417
Signature Algorithm: sha256WithRSAEncryption
ab:70:34:f3:92:a1:0a:2f:b7:d6:9f:83:3a:e7:60:13:5c:a9:
c9:f2:3c:de:c5:56:9c:4e:3d:4e:c7:8e:58:02:d1:94:9a:bc:
b3:15:77:36:81:7f:e5:8f:7f:cd:5f:1b:86:83:00:ab:6c:d3:
a5:f6:45:1f:ae:43:96:a5:6f:48:13:65:ed:bf:c0:bf:64:ca:
cf:6b:aa:dc:2a:a0:b4:52:ba:6e:52:60:b9:07:74:66:5f:a8:
89:c3:f1:cb:60:72:00:34:ae:34:43:6e:50:b2:c9:58:86:7f:
b4:95:fa:f5:32:d7:6d:97:0a:27:41:e8:41:76:16:c6:d0:8a:
34:2e:a5:4b:3b:6e:e3:c2:9a:a3:02:ea:d8:b9:35:a7:8a:72:
e1:ff:d3:c2:16:a3:19:f8:60:5c:34:df:fb:87:84:33:f0:13:
cf:b1:35:3b:bb:45:34:5a:ce:ed:46:a7:46:a2:2d:d9:f7:f2:
ff:13:67:0b:f0:35:22:55:6d:1d:c0:1c:0e:0a:86:ca:d5:a3:
08:f3:1a:06:a8:7d:04:39:2b:fd:ae:d5:9e:8d:24:e0:99:ec:
d9:c0:6f:37:06:55:a4:7e:72:92:4e:27:8f:88:7d:f8:47:50:
13:1a:7a:31:d7:65:bd:c8:2d:1d:46:59:2a:00:0e:e3:80:3f:
03:8d:24:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:06:44 2024 by rpki-client on console-ams.rpki-client.org