Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T-IhgZlVyiLjveo0hzc-GLSW2iI.cer
File: T-IhgZlVyiLjveo0hzc-GLSW2iI.cer (raw, json)
Hash identifier: UOHRgw6XxFnVzhadC7CzwgVTYw/M9yMbf7OolAsplVA=
Subject key identifier: 4F:E2:21:81:99:55:CA:22:E3:BD:EA:34:87:37:3E:18:B4:96:DA:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B672F9490EB30FC1DA21203EBD9F03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197856
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:72:f9:49:0e:b3:0f:c1:da:21:20:3e:bd:9f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fe221819955ca22e3bdea3487373e18b496da22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:30:5f:ec:0c:f6:28:f7:e8:93:ae:d7:0e:
03:07:11:b5:4e:78:53:5e:d9:c7:e7:32:4e:ff:c4:
8f:66:f5:ae:3c:e1:30:49:4f:71:af:c0:fe:7c:8c:
ef:4a:b0:8e:bf:c8:52:55:30:9b:66:fa:fa:21:77:
0a:86:6c:b0:4f:a4:8a:6b:d8:55:00:a6:35:69:fb:
49:80:db:89:1d:2e:82:ef:4b:3f:a3:fe:99:b4:b2:
d6:d4:19:88:ff:16:0a:dc:21:1c:7d:0f:2f:1b:48:
27:74:4c:31:3e:1a:a8:a8:90:bf:e3:e7:9b:e9:84:
4b:59:cc:09:9e:06:a3:3f:7b:79:70:0b:7b:4d:c2:
dc:2d:b5:75:8e:8a:6f:38:9d:d7:73:49:08:c4:da:
fc:f9:1c:34:01:1a:82:ff:da:bd:ae:0b:c8:f6:91:
31:25:ab:9a:8f:b1:69:81:2e:86:87:43:23:84:a4:
10:2b:88:30:d3:53:f0:ff:73:e0:4f:2e:4f:7a:ed:
ef:9e:39:bb:2d:ed:ac:f8:f2:95:25:24:9b:7c:04:
eb:0b:aa:40:63:e0:8d:08:37:b3:e4:40:5f:11:49:
27:c4:77:15:e6:5e:e3:6d:24:af:cf:f4:ea:9d:d2:
56:a8:0f:b4:1f:81:99:90:6f:88:ff:24:49:1d:e8:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:21:81:99:55:CA:22:E3:BD:EA:34:87:37:3E:18:B4:96:DA:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197856
Signature Algorithm: sha256WithRSAEncryption
81:cd:b8:c9:97:0c:bf:c6:fd:94:d2:d3:13:5b:32:2d:f0:91:
d5:7a:b7:ec:51:5a:2f:68:30:20:3d:ee:e4:a5:8a:87:c3:c6:
4d:8b:b7:03:51:49:a8:2e:dd:e4:4d:3a:2f:33:d5:08:9f:7f:
54:c0:fb:4f:78:b4:d5:b2:65:39:62:12:2f:40:00:ae:33:31:
53:c6:3d:b1:89:a4:19:c0:d1:20:4d:f6:de:f2:c7:d7:23:24:
23:bf:f5:97:03:fd:3c:b7:f8:ce:e3:04:70:3f:c6:7a:09:da:
72:55:62:45:f6:46:bd:2d:a0:ac:71:93:a1:03:02:b6:34:ba:
8a:e4:39:5f:7d:11:06:0c:7d:72:69:ac:1a:40:7d:85:48:09:
63:60:39:fa:c5:96:5c:4d:bf:25:b4:77:ad:42:ef:65:ec:a0:
18:1f:1f:bf:48:62:e0:c0:e2:df:b7:f6:15:b9:d6:e6:91:91:
f4:d2:3e:54:44:3a:9b:fe:07:45:e8:b3:39:d7:82:8e:2a:1c:
2e:6f:28:f3:87:18:ca:21:d5:ee:42:15:3b:43:4b:b6:3a:ab:
ff:72:36:86:dd:d2:a8:c3:d6:ca:dd:97:ba:bd:8a:1e:90:3b:
d6:07:10:bc:e1:57:c8:80:a8:42:d9:68:8d:0b:76:5e:91:a6:
a2:cf:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:18:19 2024 by rpki-client on console-fra.rpki-client.org