Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
File: MSlo1l98AfONI-2LIPWDE7Xyhio.cer (raw, json)
Hash identifier: rKmqsofOF9v2/8/ez3J0CNbVnspybIqYliTqtRpgOIM=
Subject key identifier: 31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D18234727BF7D4674B866366E9ECB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
caRepository: rsync://rpki.co/repo/Matt/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 64457
AS: 202559
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:18:23:47:27:bf:7d:46:74:b8:66:36:6e:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:c4:f1:25:c9:63:52:52:61:d1:74:3a:38:
e5:12:2c:9a:b6:f8:6b:dc:c8:e6:8f:74:7f:a8:1e:
b6:14:d9:4c:5d:e2:78:11:32:e5:66:5d:bf:ff:3c:
5d:df:7b:9c:e1:76:8e:9b:c5:b2:50:ac:85:94:21:
1b:12:91:b5:47:31:fc:99:b3:30:c1:1b:c2:92:a3:
a9:51:6c:44:a8:0a:37:2e:fc:7a:76:8d:48:7c:fb:
1e:6e:68:82:fe:2b:d2:9f:30:11:ee:95:ec:74:08:
50:9b:51:23:4e:8d:c0:98:32:cc:9c:80:72:bb:57:
1f:a3:5f:a3:a0:da:02:f3:cf:61:9d:d1:b6:71:01:
06:07:7b:2e:80:74:7f:09:9a:f0:de:a1:4d:ef:6b:
13:71:54:cf:4a:bd:8c:92:ae:23:46:7b:b8:9f:58:
80:87:02:a0:12:8f:83:27:a0:15:7b:42:db:ea:46:
d3:3b:d8:6b:a8:d1:5d:2f:4d:56:39:58:b9:9e:98:
83:d5:d7:07:39:5c:1e:74:5f:4a:c7:64:1c:48:2f:
d2:ac:11:39:dc:cc:07:91:e1:40:14:8b:16:6e:0d:
7e:e1:43:9d:19:d1:fb:a9:14:34:6a:c8:bf:4a:20:
a5:55:da:df:37:d5:86:df:f7:21:6b:15:20:e2:d2:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Matt/0/
RPKI Manifest - URI:rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64457
202559
Signature Algorithm: sha256WithRSAEncryption
9b:48:26:45:97:e0:d6:da:73:6d:d3:da:73:5d:f2:7a:bc:4f:
9c:bd:ae:04:7d:d2:f3:8f:6a:61:b1:0f:ff:2d:0f:ff:31:5a:
50:14:80:6c:d1:30:a7:fa:64:65:c6:8f:41:e1:9d:71:8f:f8:
65:72:1b:cb:ad:e1:5a:18:13:dc:ed:66:3f:90:ea:57:0a:85:
70:57:a0:b0:45:b7:04:50:07:56:1c:8c:2b:4f:05:ec:c1:d9:
61:e8:1f:ec:ff:dd:93:07:8e:7a:bb:48:2c:85:b2:0e:62:a9:
46:a1:00:c2:3c:92:12:e0:bd:de:32:9d:f3:49:86:40:58:6c:
0e:91:29:d2:45:39:0f:fe:31:fa:9b:0d:c4:22:63:25:66:c0:
72:b3:fd:be:28:30:af:12:24:e9:e4:fc:6d:aa:37:7a:cb:07:
d7:30:ee:bc:40:69:84:65:30:fa:f6:49:fc:29:b9:7a:84:5c:
89:fc:c2:da:ec:55:63:c7:89:27:05:24:d1:71:76:c3:c9:3b:
ac:ec:9b:5e:02:0e:4b:9b:f1:e2:b1:5c:c3:63:6d:25:7f:68:
a0:c4:0f:07:60:83:8e:b3:7b:6e:95:77:f4:37:db:1c:18:15:
81:4e:d0:cf:5d:e9:0f:b7:44:d9:4c:3c:ad:fe:d2:38:c3:5a:
40:77:e3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:39:04 2024 by rpki-client on console-fra.rpki-client.org