Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer (raw, json)
Hash identifier: RMV84Pputh0LsDxToBBAcU0NYFNNMiLrDzpgM0oqZC8=
Subject key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CFA69161610740596B4EA5CB71355
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41333
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fa:69:16:16:10:74:05:96:b4:ea:5c:b7:13:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:2f:b7:6e:9b:f5:d7:de:d5:11:6e:ed:b7:
32:54:59:f2:fd:b1:27:47:54:01:f6:58:47:6d:21:
5a:ce:ad:b8:c2:f1:ac:4b:bb:68:68:de:72:d3:17:
ac:1c:ee:37:47:e0:ea:19:76:20:2b:36:65:0a:17:
af:bd:cd:20:a6:2a:92:d4:ce:de:c5:fc:ae:4d:33:
61:e2:1e:e3:0b:a7:e9:e8:cd:df:d3:35:74:88:34:
2e:d4:e9:a3:de:a6:9c:72:05:74:46:08:ba:13:bc:
e2:70:8b:d2:27:0c:22:40:34:b0:5f:a2:78:9b:20:
5e:59:71:7a:6d:11:81:f8:0d:c0:45:55:af:2b:ce:
f3:c6:6d:ed:9c:ab:df:2f:1f:73:6a:3c:0d:e0:e2:
e9:5e:9b:ac:c9:a7:8c:2e:63:5f:03:1a:15:b7:df:
18:3b:de:ad:f2:b4:37:ba:74:1a:7f:76:28:b7:70:
ca:c3:23:c4:cc:75:d8:9f:fb:1a:49:ba:00:7b:07:
18:73:d3:c5:24:b9:83:2a:3d:b9:3d:5d:26:17:70:
a6:c5:6f:a4:95:4d:46:71:c9:3b:34:6d:d2:ca:94:
94:95:58:a3:e1:3c:c3:c1:93:bf:12:c7:0c:e7:6e:
c4:da:16:91:0b:ca:99:4e:38:27:0e:d2:8e:9a:ac:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41333
Signature Algorithm: sha256WithRSAEncryption
76:2b:e0:6b:14:b3:29:bc:b9:04:3a:09:f8:8f:1d:f7:8c:3e:
12:c5:27:38:3b:6a:9c:94:dc:58:19:17:96:fa:ad:6e:53:1b:
45:78:9b:ea:c0:5f:38:72:3c:39:71:21:45:ba:e2:6b:ec:c3:
68:b7:ac:cd:bd:67:d6:48:a2:c5:bc:af:ce:47:22:a3:63:01:
84:3e:1f:c4:c7:11:c6:ff:f4:44:ff:95:41:42:ff:4f:99:94:
ab:b5:0e:66:25:cb:d5:18:97:4b:87:b5:78:46:5d:9a:81:7e:
c4:70:e2:df:c9:4c:8a:f6:29:15:78:fb:66:17:10:26:5f:80:
a4:f8:6b:fe:87:e0:07:07:13:dd:3b:09:b4:bd:a1:34:f7:0d:
a0:0d:0f:be:eb:39:85:18:9b:52:5b:41:b2:12:b3:4e:41:7a:
e2:07:30:ce:80:9b:4e:05:f1:be:13:68:35:ee:b4:31:4c:6f:
2b:9e:49:82:3d:af:4b:e2:35:58:54:48:9f:25:fc:99:a2:31:
22:f6:1e:a8:ec:37:dd:05:e0:84:a4:32:54:c2:72:bb:2e:45:
69:40:25:2f:36:4f:ad:03:e8:0f:5d:2f:eb:dc:cb:c8:e1:12:
0c:e2:71:c7:1f:56:57:b9:0c:58:da:a3:24:9f:f5:de:c3:08:
ed:5b:ca:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:06:17 2024 by rpki-client on console-ams.rpki-client.org