Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
File: IyYoKFK1RzuXS_-ersILA6XyAQ4.cer (raw, json)
Hash identifier: tYFae4lbwq0iysCtFWMBrsPqD5lBaqiFK2ntGDdHetw=
Subject key identifier: 23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192818C774FBD21F91FC09604860BAE20A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 12 Oct 2024 16:25:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216193
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:81:8c:77:4f:bd:21:f9:1f:c0:96:04:86:0b:ae:20:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 12 16:25:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2326282852b5473b974bff9eaec20b03a5f2010e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:f0:e5:a5:e4:46:85:e2:59:2a:1d:75:7a:
98:0f:99:04:eb:d4:10:13:f4:3d:70:3c:73:b6:39:
74:11:2b:f1:15:51:5f:1c:d2:b1:c5:b2:8e:dc:de:
16:1f:01:c5:6c:e6:91:3a:94:0b:b0:d6:b8:82:fa:
77:87:22:62:bc:b5:90:68:9c:d0:2d:c9:e1:52:e1:
e0:ba:ec:c5:11:2f:54:75:a3:77:82:ab:ae:25:e4:
b3:d8:b8:2a:bc:55:ed:c5:ea:2a:81:7b:20:0e:89:
5e:5e:56:0a:d7:2d:d9:13:69:24:13:a1:7e:f0:0b:
55:63:df:5c:96:c0:71:da:be:d6:14:ad:4e:35:ab:
c3:97:4b:da:43:1c:53:2f:f7:61:11:44:5c:23:14:
41:ff:1a:eb:36:f4:a9:63:9e:3d:6d:8a:10:70:88:
92:8c:9c:ee:e3:7e:64:23:64:54:c1:bb:f7:17:f9:
09:86:2f:1c:c7:6b:05:b1:af:23:68:80:75:8f:4b:
1a:94:41:a4:8f:4c:e7:a5:04:ba:40:9c:67:ae:66:
31:41:8f:ab:5a:6e:80:e7:77:7a:9c:d1:3e:41:77:
e8:41:cc:05:2a:0a:28:d5:42:f9:14:41:d3:cc:48:
61:fd:c1:a8:16:82:db:06:15:98:1f:5d:8e:d1:5f:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216193
Signature Algorithm: sha256WithRSAEncryption
9e:5a:38:70:93:22:8e:ff:7e:17:01:67:5d:af:7e:1e:de:09:
e2:84:e1:ab:14:b1:bf:12:76:ef:fc:aa:98:d1:a3:43:d4:7a:
d3:22:b2:41:67:3f:be:1d:7f:35:cf:33:56:45:38:09:16:2b:
1d:be:df:f1:bc:b9:dc:ea:59:d7:d3:44:cd:f3:9c:66:62:14:
93:ff:0f:cd:95:1a:b9:47:18:a6:43:86:fe:cc:4e:57:ff:c6:
1e:40:9d:f1:c5:4d:4b:08:7e:7e:df:d1:59:66:8e:b8:88:65:
ae:61:3b:c5:35:31:aa:93:bf:b2:d7:32:9f:56:c2:ab:43:4c:
33:4f:b8:2c:85:50:13:03:6e:00:27:4a:87:24:2e:21:38:56:
8e:13:d5:9a:17:cb:f3:1e:bf:09:a1:bf:39:d8:62:ee:5d:39:
c1:43:5b:13:ec:1d:c5:47:1f:a6:1a:c6:72:36:51:93:84:bb:
cc:65:f0:9a:a9:ec:52:21:fe:86:7a:68:29:fd:8f:25:6d:2d:
75:e6:18:fd:0e:a4:91:f4:23:dc:cc:f1:b4:69:99:20:bd:91:
00:21:f3:19:da:84:d5:89:e7:1e:9b:9f:ef:f2:66:45:b3:42:
c1:d6:fe:f8:9d:4a:c1:c7:48:54:0a:ee:14:47:8d:c1:00:14:
ae:15:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:06:49 2024 by rpki-client on console-fra.rpki-client.org