Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SVHXungMV22Qhx8SiBCXEN2TPdg.cer
File: SVHXungMV22Qhx8SiBCXEN2TPdg.cer (raw, json)
Hash identifier: o3vngHq3jGvn0tRpVgm783712OyPLdFUjhLR6/2//08=
Subject key identifier: 49:51:D7:BA:78:0C:57:6D:90:87:1F:12:88:10:97:10:DD:93:3D:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D99BAE17066F4B6916C825D6033BB99E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/808990-e333-46d8-8848-c178da76555b/1/SVHXungMV22Qhx8SiBCXEN2TPdg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/808990-e333-46d8-8848-c178da76555b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 11 Feb 2024 19:52:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199529
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:99:ba:e1:70:66:f4:b6:91:6c:82:5d:60:33:bb:99:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 11 19:52:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4951d7ba780c576d90871f1288109710dd933dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:76:70:7b:b7:08:af:86:30:c4:b0:6a:82:
ae:c0:1e:db:9c:ed:46:a8:eb:55:16:60:47:51:5c:
e2:bf:b0:84:a2:ff:16:8a:e3:33:b6:b1:2c:ed:54:
9c:02:17:7b:2d:c5:2b:66:7f:b6:15:fe:13:f4:f1:
98:4d:b2:a5:8d:0d:20:4e:b3:c2:37:77:9e:6d:fa:
7e:ac:a0:07:27:48:12:df:21:0c:f3:e5:87:8b:3f:
e5:a4:e3:52:78:f4:ca:07:e3:88:24:f9:f1:94:6e:
ef:67:43:16:b0:1e:a7:b5:38:85:8c:ae:65:46:02:
80:14:b0:70:ad:1e:e9:a1:06:8c:72:3e:f6:02:58:
55:a8:51:11:a7:1c:d6:51:1a:e6:0c:ce:c2:2a:f5:
03:ae:cb:9b:27:36:d9:58:0a:a0:1b:09:4d:6a:c6:
d2:98:14:cd:9f:9a:c8:e7:25:e6:7b:5e:92:52:87:
eb:b0:96:1f:6e:47:06:f1:ae:e3:d7:a4:d9:6d:1f:
40:ab:96:f4:5b:9c:8d:5a:1d:70:e7:ac:a3:39:87:
a5:57:eb:1f:e2:5b:2b:77:11:6f:da:78:d4:c4:5d:
4d:5f:31:d5:40:53:0d:24:33:4f:86:3d:01:9b:4e:
c3:a5:20:3c:bb:fb:da:45:98:9f:65:7f:e7:4b:5a:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:D7:BA:78:0C:57:6D:90:87:1F:12:88:10:97:10:DD:93:3D:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/808990-e333-46d8-8848-c178da76555b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/808990-e333-46d8-8848-c178da76555b/1/SVHXungMV22Qhx8SiBCXEN2TPdg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199529
Signature Algorithm: sha256WithRSAEncryption
0d:a4:30:18:8e:e3:d7:f6:d3:6f:00:37:02:89:e2:fe:b8:5c:
07:d1:af:96:a5:ac:b8:0f:96:1c:c7:c4:16:b9:49:3f:96:e3:
c3:7b:f6:af:22:33:70:84:f7:60:4b:72:8a:cc:26:ec:9c:b5:
e2:48:63:ab:27:d4:09:f4:f6:c0:3a:a3:a7:0e:da:f1:b8:65:
53:d6:80:5f:e0:74:58:12:5a:2f:ed:ba:dd:4e:94:08:17:5c:
5d:1d:60:5b:c0:67:c0:0e:45:20:27:8d:c2:39:f2:f8:34:be:
4d:15:18:f4:75:7e:88:77:79:63:33:9b:35:7f:d1:a7:b7:03:
87:74:96:c3:0d:8e:17:88:98:3a:92:b7:45:5b:3d:56:a3:a2:
1e:ce:6b:32:6f:f5:2d:fa:6c:f1:c6:00:26:ea:bd:ed:9b:48:
57:8f:78:92:4a:90:e1:be:2d:1b:d5:88:63:7a:77:70:12:47:
5e:5e:1f:4a:24:a2:fc:13:58:be:06:31:b2:f7:cc:e9:61:d3:
c0:2d:af:ca:1e:17:bf:3c:e2:d2:ee:5a:c2:a0:c6:0a:f6:f3:
e1:b6:47:6d:0f:4a:c4:ff:c0:70:5d:d9:9e:8f:42:48:e3:00:
59:ab:65:a8:ac:4e:96:16:ec:dd:b1:17:a8:f1:72:ff:19:93:
f6:78:7a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:38 2024 by rpki-client on console-ams.rpki-client.org