Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer (raw, json)
Hash identifier: OFiKCufQ0JH04E5e9N65j1Sq3wdUdnPCaLuvDF/Pq7M=
Subject key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F5BDE9107AD7F89336F4F6AA0654AD94C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 May 2024 05:41:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215221
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5b:de:91:07:ad:7f:89:33:6f:4f:6a:a0:65:4a:d9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 9 05:41:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:a6:df:5e:48:d8:82:83:91:d9:78:77:93:
69:c0:4a:03:28:bf:bb:a6:34:75:e2:b5:b2:80:61:
63:c1:7c:91:d9:9d:bc:35:89:95:d5:85:9b:69:19:
ae:af:27:46:68:62:e6:f5:a1:43:85:95:eb:19:37:
6a:6a:09:a7:e5:51:61:33:68:d9:61:44:cc:18:ea:
4a:e5:f0:c3:dc:d9:c8:9c:7e:ac:29:67:24:e1:2d:
15:31:04:e4:b3:40:9b:2e:66:cd:2c:b3:93:35:ee:
dd:6a:54:ff:68:80:8e:e1:68:97:c4:7d:63:4a:96:
b2:fc:4d:83:c1:77:69:72:34:1f:d8:85:70:db:ff:
7c:cd:7e:2a:1e:0d:2b:d9:bd:43:40:f2:8a:b2:66:
d0:f9:33:b7:27:d6:05:7d:e3:89:ba:7d:fb:a8:c2:
2f:25:ce:b1:74:80:2b:b9:5d:0a:a0:5a:ca:f3:da:
ef:79:17:c1:6d:aa:29:02:27:05:dc:02:4e:f1:e0:
bb:56:90:c1:47:84:44:f5:c0:cf:eb:b4:a5:17:16:
ac:82:a5:9e:57:77:96:2c:36:17:6c:d9:62:14:bf:
72:37:c0:2e:b9:b4:cd:99:f5:82:a2:57:41:15:ae:
f1:73:35:b1:71:9c:d0:96:d4:0b:74:ff:d6:59:2a:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215221
Signature Algorithm: sha256WithRSAEncryption
92:e6:24:e2:e1:be:c0:6b:30:bb:0d:74:39:31:52:8a:78:a0:
23:9f:3b:6c:57:40:0d:d3:c4:25:6c:d0:22:05:03:59:ec:4c:
ea:7d:2e:ee:cd:ba:18:5a:27:64:67:ee:c2:e2:35:0d:5e:66:
e6:de:1c:29:dc:18:48:d1:a4:24:64:1e:75:2b:9b:cb:e7:02:
ef:bb:8f:37:7f:88:c5:24:eb:f8:3c:15:24:56:03:5c:1b:d8:
99:c1:39:96:24:b2:c8:9d:84:8e:51:6f:d2:31:ac:00:73:92:
2d:2e:13:96:12:72:6d:22:af:27:0b:9d:ac:86:e1:f1:39:e8:
76:cc:3e:60:45:ed:94:e4:6a:64:ae:69:44:a0:6b:ca:ed:46:
cd:76:9b:08:2e:02:78:57:21:b7:04:c3:71:47:32:1f:45:27:
75:55:43:8b:1a:b7:be:96:47:1d:28:e3:63:99:cf:fb:f7:28:
71:69:83:6e:08:a2:87:e0:61:3f:3c:c4:70:4f:3a:de:0a:00:
6e:d8:65:44:23:27:60:2b:81:ab:f4:11:21:18:61:d4:cd:e5:
6b:dc:6e:a4:4e:91:b2:60:0a:a3:78:c0:59:dd:1b:2d:9f:4d:
2b:8e:03:70:50:76:06:09:af:02:7c:4e:46:c5:09:5e:cc:71:
6d:0e:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:12:01 2024 by rpki-client on console-ams.rpki-client.org