Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S0heTP8p1gHfeeLwUOp0uVhopg4.cer
File: S0heTP8p1gHfeeLwUOp0uVhopg4.cer (raw, json)
Hash identifier: PFF9H822ogh68k/wrt7AK2VBUVws2kSOx3zRCw4ifZ4=
Subject key identifier: 4B:48:5E:4C:FF:29:D6:01:DF:79:E2:F0:50:EA:74:B9:58:68:A6:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B93C9236BB07F118EADBC042640360
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/S0heTP8p1gHfeeLwUOp0uVhopg4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48090
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3c:92:36:bb:07:f1:18:ea:db:c0:42:64:03:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b485e4cff29d601df79e2f050ea74b95868a60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:c6:4b:07:98:a3:85:0c:9d:3e:2b:45:fd:
61:5d:f2:b2:8d:12:cc:2e:88:c2:5b:3a:13:f9:58:
13:c4:9d:58:6d:8d:f6:f0:20:53:dc:9f:80:39:e8:
36:75:41:08:65:2f:27:81:1d:bd:e7:6c:3d:a7:e3:
fb:1b:18:3a:f3:d1:bf:15:bd:a0:ad:35:42:d0:05:
57:25:84:e1:bd:57:8c:64:c6:34:64:e0:2a:04:7a:
2c:22:70:bd:1c:67:d5:2b:64:7f:6c:b5:74:47:23:
b3:b2:ae:7d:49:88:73:c5:fb:45:d6:74:2b:99:e7:
1e:2a:32:67:de:f6:17:70:c0:09:a6:43:f8:01:48:
2c:49:ba:2e:41:a9:d9:64:17:b7:ce:9a:8f:fb:3c:
cc:b1:09:16:c0:c7:ec:fb:c7:ea:93:77:4a:c3:b0:
b6:5b:24:bd:33:7f:81:3e:72:a6:38:d5:99:f2:cc:
db:14:fb:e1:0a:93:6c:da:ed:d0:20:1a:d0:52:9b:
03:b6:0b:f3:fa:93:24:55:b3:0d:47:4a:4b:74:57:
a6:54:00:b1:31:7f:b7:53:c3:3d:e4:ea:1c:2f:f7:
48:ce:f1:9c:56:27:41:c6:1c:3c:e4:a8:94:94:53:
36:11:d7:5a:48:35:ba:4a:0b:01:04:12:4c:a1:6d:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:5E:4C:FF:29:D6:01:DF:79:E2:F0:50:EA:74:B9:58:68:A6:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/S0heTP8p1gHfeeLwUOp0uVhopg4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48090
Signature Algorithm: sha256WithRSAEncryption
58:b7:0f:79:6e:1a:c6:97:53:2d:d3:04:0a:4a:51:5f:66:9e:
7a:05:fc:f2:24:57:6d:a8:b2:60:c1:24:3a:e0:22:16:06:87:
7c:85:de:10:bc:b4:5b:a1:17:24:b5:11:35:6e:8f:76:70:f0:
e3:5d:b5:91:72:fc:f8:e0:85:eb:db:97:96:49:05:20:9f:03:
a1:10:55:dd:05:bd:bf:b3:8d:a3:fe:37:93:84:90:16:2a:23:
ac:7d:fe:b2:5a:8d:3a:5c:2f:93:23:39:80:c7:3a:98:fc:72:
4e:42:8a:31:7c:71:3c:7a:76:a6:3a:69:11:55:43:e6:c2:7f:
bf:f4:24:39:28:73:d4:f7:02:1c:0b:77:a8:ab:bd:56:5e:49:
dd:90:85:4a:b7:c1:0e:cb:51:02:ac:b1:a3:ac:c3:73:75:8d:
99:8a:0d:10:40:67:08:8d:11:e3:2b:25:45:c3:25:5b:06:35:
8b:34:49:fd:81:3b:05:da:84:d6:f9:b1:a5:7c:90:a9:c5:51:
32:2c:49:cb:59:8f:50:0e:6e:99:54:6a:24:23:a0:4b:cc:fc:
f7:55:0a:4c:ee:6d:0e:b1:1c:53:cb:d1:ae:9e:9a:32:4c:53:
c4:bd:08:f0:1b:62:47:f2:46:96:4f:6f:dc:f6:65:4e:67:9c:
bf:a4:01:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:32:50 2024 by rpki-client on console-ams.rpki-client.org