Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer (raw, json)
Hash identifier: yuJq6yPJj2OWee/mb9Y9RR3w6CkRLBEJHLaNjav4BC8=
Subject key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B73FC7B9B7CD2A4E18AFF7BF264A33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12442
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3f:c7:b9:b7:cd:2a:4e:18:af:f7:bf:26:4a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:74:d0:72:d6:31:21:33:b7:35:1c:8e:94:
bb:47:2e:74:93:a7:e0:4e:70:1e:0e:9d:df:b3:49:
9e:8c:dd:f6:f8:91:2a:d3:45:e0:47:93:aa:4b:c3:
42:b7:3f:e2:1c:ea:de:f0:97:7d:9d:b6:27:3c:d3:
4e:8c:43:58:3c:9c:6d:0e:f3:9f:bb:7d:07:0a:fe:
f3:f5:f8:4f:8d:d7:d9:95:e6:41:8c:11:c2:72:ed:
ae:a7:13:87:12:b9:52:83:90:42:36:3f:f0:ad:9c:
58:75:69:6d:9e:1f:06:98:4a:dd:8e:0f:b2:b6:06:
30:84:f0:85:1b:a3:3c:3e:0d:93:a5:77:45:d2:0d:
1e:9d:99:5f:30:45:0f:20:5a:43:63:59:2e:c1:70:
75:6e:02:84:10:62:14:e6:44:dd:8d:eb:63:f0:a6:
d2:16:aa:14:cc:20:25:6b:a5:dd:94:bd:5a:8e:d8:
c7:41:31:fa:06:c9:eb:e7:c6:00:f3:88:17:8b:d9:
02:af:c2:b5:79:1a:1b:97:76:ec:30:1f:16:2e:5a:
fe:0a:ed:0d:e3:9d:95:b6:50:7e:f9:8f:a4:cd:4a:
9c:78:5c:10:ac:b5:d0:e7:ba:21:01:bf:b4:36:26:
fe:22:7b:80:69:18:04:3e:82:87:a3:da:98:59:7f:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12442
Signature Algorithm: sha256WithRSAEncryption
96:3e:19:b6:95:29:3a:3e:86:4e:06:e9:dd:be:8a:eb:45:b3:
d2:bd:64:40:a7:61:72:97:ff:28:8a:f0:ac:c5:5e:19:b4:fe:
3c:76:a3:60:ac:a5:1b:22:cc:4b:de:5e:15:98:f9:e4:7c:2f:
51:31:01:f9:02:2c:a5:71:e4:43:d9:62:1a:30:c9:31:48:31:
d5:37:26:b0:e0:a8:31:83:a6:9b:a4:e6:17:52:50:b3:f4:fa:
53:a7:0d:7e:c2:9a:66:34:d2:84:78:d8:b1:c9:3c:ec:15:c4:
d9:6e:da:93:df:46:a9:bb:b0:b1:0f:48:e6:88:1e:1e:d2:fd:
26:56:b3:ba:79:08:ba:d1:29:65:7e:72:d5:f0:ca:ac:16:b8:
64:01:ca:ea:3d:90:c8:7f:19:a8:75:2a:20:76:bb:99:7c:2a:
1c:53:be:26:a0:c3:ae:0b:5f:ec:e5:fe:95:52:f2:b5:0d:9e:
bb:2d:ce:fe:ad:13:f6:c0:bf:5d:11:30:99:0b:04:89:9f:7c:
76:06:44:69:e7:7e:c5:80:c9:c4:a7:71:d3:18:b3:c9:74:52:
9b:61:2a:7d:f7:1d:aa:d2:2f:e3:4f:ca:d4:52:50:e5:8a:63:
5c:52:0d:84:82:06:45:52:96:9b:ab:e3:1b:7e:f9:78:fb:66:
c3:d5:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:44:25 2024 by rpki-client on console-ams.rpki-client.org