Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SKigN30OMoPX2omp7sPtgWF7R6Y.cer
File: SKigN30OMoPX2omp7sPtgWF7R6Y.cer (raw, json)
Hash identifier: 1rvL2ozkAJjxMt2OlEVCCJc52KVHEXOG2Rv5ArNZPNo=
Subject key identifier: 48:A8:A0:37:7D:0E:32:83:D7:DA:89:A9:EE:C3:ED:81:61:7B:47:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D20405AA023853C4F9A6432EA1A59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/48A8A0377D0E3283D7DA89A9EEC3ED81617B47A6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210561
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:20:40:5a:a0:23:85:3c:4f:9a:64:32:ea:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48a8a0377d0e3283d7da89a9eec3ed81617b47a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:1b:7c:02:37:25:a7:3f:cd:14:ec:af:bd:
05:6e:d9:8b:de:d4:01:db:ca:24:c6:66:16:6e:5a:
b5:74:53:0f:7d:13:fe:e9:9b:c2:fd:a4:b1:2d:b8:
f7:e9:60:85:e5:72:6d:8c:64:f9:1e:f1:f9:cc:4d:
63:63:52:e3:a1:e0:57:b2:e4:54:94:c0:9d:b7:e0:
58:3e:08:9f:0b:24:d1:ee:5b:5f:ea:9f:20:55:4a:
8b:43:96:a9:21:4e:9c:f8:6b:d9:d1:6e:f8:30:d2:
7a:a9:75:eb:8d:9f:74:98:ef:7a:e5:6a:e3:f6:67:
93:f3:c2:a9:16:2f:74:37:98:17:a8:64:29:d0:b7:
df:87:c1:6f:23:2f:fc:7a:71:79:c6:f3:a9:20:37:
95:e2:c2:8c:d4:3c:c4:d7:92:46:ca:d6:f1:7a:c5:
92:40:a8:ab:7b:72:10:b9:cd:7f:2f:ed:c0:f5:57:
63:ad:08:0c:1b:9f:6a:4f:8d:f9:9d:8a:e0:44:35:
47:a8:f8:43:0b:76:c1:da:65:bd:cd:e6:ec:a6:02:
20:8c:ad:3b:65:aa:35:08:5b:bf:29:3a:81:51:1a:
b1:ae:6e:d0:f1:7c:6f:c8:31:8d:79:0e:c7:76:f4:
12:38:73:8e:e7:39:74:73:13:63:d3:7b:fe:19:6c:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A8:A0:37:7D:0E:32:83:D7:DA:89:A9:EE:C3:ED:81:61:7B:47:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/48A8A0377D0E3283D7DA89A9EEC3ED81617B47A6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210561
Signature Algorithm: sha256WithRSAEncryption
78:85:c7:59:07:69:8f:87:0c:ab:87:96:d3:f6:6d:3c:0d:49:
6c:c4:b3:1e:1a:bb:9b:56:56:33:c1:d1:73:cd:7e:84:f9:f6:
f5:df:e3:98:72:35:df:7e:e2:78:1d:2d:7d:37:12:b5:ff:8c:
35:60:6f:21:33:8b:1d:63:98:fa:5e:d5:0b:07:22:b1:a6:8d:
15:0e:73:5a:68:e9:20:76:0d:2c:a5:77:98:1a:8d:90:f5:c6:
84:83:8c:88:19:f1:a9:c4:28:b1:d7:21:b0:6e:b8:fb:02:2f:
90:82:85:fc:d4:d6:40:89:6b:e1:ba:3d:23:a8:7b:02:69:08:
a0:a1:31:53:0c:60:ea:f1:a5:1a:a0:2c:1c:7b:39:ed:6c:8a:
38:53:b2:02:5e:7a:a6:b0:2a:f3:65:e0:70:a3:32:6c:c1:3c:
25:da:52:a1:b3:a8:de:1d:25:cf:cd:75:91:b4:f8:43:71:b0:
ea:0c:4f:1f:94:a5:dd:df:05:e6:f3:60:23:bb:3d:8c:02:c0:
63:19:65:dd:df:d7:d5:b2:ed:36:07:f1:2f:6b:bc:67:52:b3:
93:f5:48:ec:26:d5:7b:9c:00:f9:75:8d:3c:17:91:87:5a:41:
a6:90:19:89:76:05:3c:70:8b:78:7b:5e:1d:f2:8c:2b:b5:82:
85:37:60:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:17:42 2024 by rpki-client on console-fra.rpki-client.org