Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S674BgHHxrBqwfclCB8kLg8GvFE.cer
File: S674BgHHxrBqwfclCB8kLg8GvFE.cer (raw, json)
Hash identifier: f46dI/UW2lnPLBimxADEdkL70ngnuQ5qrr0DLfPRK3A=
Subject key identifier: 4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC3116EBAFB59F73DB95F9C50D852E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198304
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:31:16:eb:af:b5:9f:73:db:95:f9:c5:0d:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4baef80601c7c6b06ac1f725081f242e0f06bc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:20:f7:02:26:01:68:31:e2:48:c9:16:9f:
2d:76:87:45:af:fb:8e:c0:52:17:57:ac:5e:8e:37:
57:72:0d:a9:0f:a8:3e:82:cc:8a:db:47:1d:8a:34:
17:2b:79:3a:49:5c:7c:96:8d:b3:a7:90:db:24:85:
08:ba:2a:6f:65:af:b4:4c:7e:e4:bb:8d:e9:ff:16:
4d:ab:b9:51:96:d7:5a:19:ec:f7:03:2d:1b:46:34:
95:48:ba:42:29:27:3f:1a:03:ce:cd:b7:ed:95:49:
b1:83:06:67:f9:cd:ec:fe:be:91:ad:2a:99:22:61:
80:91:1b:6e:c1:44:fc:01:9c:bc:6b:20:4c:83:73:
c8:cc:fe:ed:b8:d6:a5:88:97:16:f2:b2:2b:6c:be:
42:66:79:5d:a9:7f:bb:6d:bc:31:b8:fb:10:ea:fe:
42:5a:f4:52:b9:8c:7a:7d:e8:d2:19:51:7d:10:53:
e3:a5:45:b8:bb:c4:ff:d3:7a:a8:8e:5b:19:65:5c:
1a:a6:15:ff:19:7d:84:eb:40:6a:7f:85:69:e7:f7:
24:c7:eb:b5:16:a7:9f:b5:ca:0e:b5:a1:52:3c:e5:
da:b6:8b:4e:ac:e9:c3:d5:43:5e:d8:e2:01:af:fe:
75:ce:4c:b0:17:89:39:e2:ed:fa:5d:c0:d1:47:3a:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198304
Signature Algorithm: sha256WithRSAEncryption
71:c2:c0:19:2d:54:80:55:20:ee:4e:47:04:be:ab:fa:13:3b:
25:3d:7d:a6:84:d5:67:96:e1:27:69:be:41:9b:41:0a:70:b0:
8a:f1:60:12:67:ed:a3:7e:2d:fb:8e:06:64:d6:0e:96:65:9c:
1d:86:47:ba:66:1f:58:e6:f0:78:5f:2f:b4:2f:bd:71:05:86:
ea:ec:cb:92:61:e7:ee:0e:60:c5:96:a8:19:83:ed:8c:4d:de:
04:e7:44:1b:6a:34:c9:7a:a8:ae:b4:fe:d0:44:48:80:64:42:
84:3e:1c:d2:9e:cb:71:fe:9e:a9:30:ea:91:9b:b0:33:4a:18:
df:a8:aa:e7:d5:10:a3:8c:34:3b:59:c0:3f:b2:02:0e:96:67:
af:35:58:18:38:45:09:e4:db:41:47:9f:5f:39:a0:6d:69:ec:
db:0c:92:26:f3:3e:f3:5b:e7:9e:ba:4a:d8:e6:7e:01:7e:c4:
b9:24:7c:a4:bf:66:13:d1:3f:87:ef:5d:15:41:28:d9:40:84:
b2:b3:0c:bf:fd:80:e7:c9:e6:ad:fe:15:56:68:3a:4f:0f:db:
9d:95:c9:fd:14:f3:88:2e:00:c4:a8:5b:f0:2f:70:4d:08:45:
e8:9f:be:70:fe:c5:d8:c1:3f:15:4b:65:68:e2:83:22:e9:a1:
cc:d2:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:29 2024 by rpki-client on console-fra.rpki-client.org