Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SO9rxgUngfH9WQOXeIA1fSYOrXo.cer
File: SO9rxgUngfH9WQOXeIA1fSYOrXo.cer (raw, json)
Hash identifier: sYK8DlXDl/6fqdg+m6lb2I2Wapk3Suzdv1mHBu9k0rA=
Subject key identifier: 48:EF:6B:C6:05:27:81:F1:FD:59:03:97:78:80:35:7D:26:0E:AD:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7260E041BFB415C712C0D2B5DB2DF2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/822459-5f15-48b1-bb23-073b2a5407d3/1/SO9rxgUngfH9WQOXeIA1fSYOrXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/822459-5f15-48b1-bb23-073b2a5407d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213031
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:0e:04:1b:fb:41:5c:71:2c:0d:2b:5d:b2:df:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48ef6bc6052781f1fd5903977880357d260ead7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:a7:cc:d5:c1:2b:4a:5e:de:56:38:4f:63:
21:31:e4:83:d5:30:ad:2a:c1:c4:94:cf:06:43:6d:
b8:73:bb:f9:d9:a0:64:95:f6:7a:87:0d:bf:48:1a:
67:4d:66:cf:a9:c0:6d:49:aa:24:55:94:89:c1:38:
d1:11:e5:63:3d:1c:b1:60:0e:3d:1e:81:9c:ce:9b:
ed:86:d2:b1:96:6b:f1:d2:21:c3:51:ab:be:25:d8:
1c:3d:e8:36:71:63:9b:bb:36:33:4f:46:fb:39:09:
3d:ea:27:b1:fc:3e:4c:af:69:d1:37:d1:61:4f:55:
76:8d:ff:12:7f:e0:95:24:0a:e7:c0:22:d3:13:0c:
01:a5:94:12:fd:08:81:c9:94:72:05:33:ce:30:bd:
60:cc:7d:77:b3:e5:f0:b0:d8:6c:b2:da:ff:15:51:
9a:bb:6b:a5:10:c2:52:50:87:6d:d7:dd:b5:ef:7c:
2a:e5:d5:1c:56:50:8c:1d:2e:05:7e:31:90:14:14:
0f:05:66:00:ff:90:ea:84:7e:f4:e8:24:ea:2c:5f:
a8:94:1f:b5:13:77:4f:2a:e6:d5:69:a0:49:9f:0e:
63:d9:7a:3f:c9:f1:1c:72:a6:54:de:d2:1b:0c:71:
c6:dc:1d:7d:80:4a:be:d6:98:c5:75:9d:50:8b:00:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EF:6B:C6:05:27:81:F1:FD:59:03:97:78:80:35:7D:26:0E:AD:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/822459-5f15-48b1-bb23-073b2a5407d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/822459-5f15-48b1-bb23-073b2a5407d3/1/SO9rxgUngfH9WQOXeIA1fSYOrXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213031
Signature Algorithm: sha256WithRSAEncryption
40:24:b3:0e:d1:1b:18:6c:78:96:e6:0e:a6:a0:61:45:0b:f4:
c9:43:4e:59:79:e4:5e:91:7d:7f:34:49:45:05:cc:b5:d2:d1:
54:89:ec:6e:dd:ed:59:85:4d:71:3e:fb:e4:29:35:e1:76:77:
83:c2:c0:62:63:1a:ca:9b:d4:27:94:d4:3c:44:80:9c:1b:16:
c2:2d:4a:04:f6:b6:28:51:06:ac:92:43:5c:58:0e:d7:c1:85:
5d:ad:13:d6:3b:66:85:a0:a0:3a:1e:67:a9:7f:0b:a6:6c:2f:
49:f0:7b:a7:10:be:f4:07:ae:2f:b1:6a:1e:45:71:e2:3b:b7:
61:e0:0d:63:c5:80:01:6f:44:5c:33:3d:a9:aa:d1:80:00:b0:
8f:94:59:5d:95:46:f4:45:60:1a:85:17:1a:16:0a:99:df:93:
38:cb:5f:56:73:93:d8:17:21:23:80:d3:09:f0:0a:de:38:33:
c6:1a:4d:cb:ee:a7:ab:f3:2d:36:1f:e7:91:f2:12:39:67:d5:
7b:3f:bf:4e:84:7a:f9:b2:d6:1f:fe:f8:fc:a8:cc:89:a6:9c:
ec:9d:bc:41:3c:9b:5c:7a:5c:76:b4:4c:e6:ae:41:da:6e:1b:
5f:e2:3d:db:0b:39:d8:33:53:c8:b3:ed:30:ae:ef:10:c2:65:
3a:2d:1f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:00:55 2024 by rpki-client on console-ams.rpki-client.org