Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.cer (raw, json)
Hash identifier: xk6VHKyTdyZAO9RT8maI8geIDdV7ta5OxwBQoHQLf5Y=
Subject key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEE9664167BE663AACF9C82C6245B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208836
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e9:66:41:67:be:66:3a:ac:f9:c8:2c:62:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:70:97:49:db:c9:72:7b:9f:1d:e0:b8:50:
77:1b:c0:95:c6:04:2e:c2:87:d0:c9:7e:24:17:09:
5a:47:d9:fd:65:d1:c8:ed:d1:e0:a3:20:35:1e:9b:
d2:28:04:fe:ea:1b:ce:02:ca:bb:b7:88:f3:00:30:
7b:27:20:0e:76:09:19:da:c2:be:7c:f5:6b:f5:67:
bc:6f:3d:38:56:be:9e:50:b9:d9:07:bc:d7:ae:2b:
63:0c:ff:26:5d:86:63:d4:80:7a:40:9f:0c:ca:f3:
b5:06:3a:f0:b4:ba:e7:2b:6d:8d:90:f3:7b:cd:fb:
1e:7f:f2:a1:39:16:f0:b1:71:cb:fc:bf:76:51:a3:
e2:03:59:93:8f:78:f8:73:89:0d:bd:0c:d1:8d:3f:
b5:c6:3e:cf:5c:3a:c4:cd:93:38:0b:8f:36:d5:17:
d0:bf:61:66:67:95:9e:e4:b1:82:24:47:1a:44:f9:
a4:82:ba:14:10:6c:33:14:27:3d:46:6d:63:e7:c7:
cd:be:8d:49:f4:07:75:3f:2c:ab:e7:81:bc:d2:5a:
35:45:88:54:4d:44:bc:ca:eb:46:a1:da:a0:d4:ab:
24:04:02:bc:26:fb:93:12:35:c3:69:5e:a5:14:1e:
76:ef:ea:88:ce:c7:1b:09:5b:96:e9:3f:7d:da:8f:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208836
Signature Algorithm: sha256WithRSAEncryption
69:cc:49:09:1a:a4:56:4e:44:ef:44:4a:da:af:3b:2c:00:38:
09:73:5c:44:d7:14:cc:e5:65:6e:44:e6:f7:3b:04:41:3f:a7:
51:c3:98:81:e1:d5:c9:44:8d:76:7f:57:9a:0a:54:00:90:4e:
ff:6f:ec:1c:a3:50:b1:54:d7:83:50:c6:97:22:38:d7:e0:ed:
1e:5e:e0:b5:5f:fd:d0:e8:bf:0a:fd:23:d7:04:ab:cd:bf:f5:
f8:8e:ea:41:4e:a3:24:d7:4a:08:3e:3f:09:a0:f9:83:7e:12:
3f:8d:6b:e0:66:39:f8:ee:b1:ed:26:0c:ff:85:29:18:26:53:
16:32:04:cb:0b:cd:bb:6a:76:21:ce:df:04:23:4a:ee:02:b0:
e1:65:f3:47:c6:f6:48:ed:12:e2:6c:26:be:b4:42:48:7d:00:
6f:d9:fa:bc:35:a0:79:70:77:be:90:75:85:3a:15:81:f0:9f:
8b:9a:06:0c:17:f5:0a:f0:10:24:9a:ff:c2:5e:61:95:4b:d9:
52:15:04:94:b4:01:83:70:d2:fc:8b:80:31:28:4e:51:15:48:
de:35:d9:65:00:3f:df:b0:b7:7c:e8:b0:06:31:f7:cc:43:a7:
aa:f6:c7:81:db:6a:a0:e5:e8:40:62:30:eb:f2:d6:f1:3f:be:
ca:a1:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:44:20 2024 by rpki-client on console-ams.rpki-client.org