Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T-K83s4GOAT7KsUMEpagOkABBLE.cer
File: T-K83s4GOAT7KsUMEpagOkABBLE.cer (raw, json)
Hash identifier: 8e7dGTwLeolDPTtrrP/gAmiYcQ+F+oV88zWA6q5A0Tw=
Subject key identifier: 4F:E2:BC:DE:CE:06:38:04:FB:2A:C5:0C:12:96:A0:3A:40:01:04:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7940F45B61F986DFEA6A6097F2D6A3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212623
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0f:45:b6:1f:98:6d:fe:a6:a6:09:7f:2d:6a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fe2bcdece063804fb2ac50c1296a03a400104b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:e7:c9:83:a7:19:86:bf:df:de:b8:57:9e:
cd:da:7e:a9:73:e8:a8:86:93:7a:f0:42:ff:76:7f:
88:98:ef:19:4f:cf:e8:3c:18:f2:16:88:e6:75:12:
e8:5f:7f:48:43:a7:5d:3f:1b:36:a3:92:55:05:4a:
48:75:d8:e2:b3:5f:37:da:63:a6:04:ca:75:59:72:
c8:3f:75:3f:a7:16:5c:dc:c9:f3:94:bd:fa:ea:ed:
13:29:de:8a:63:68:65:89:c3:1c:5a:b6:cc:7d:de:
21:b2:51:59:90:34:67:ce:64:26:07:6e:cb:d9:8e:
d5:fa:28:8b:eb:4d:60:46:4b:ce:30:d0:f7:97:eb:
45:94:63:5d:c9:9f:f0:22:fd:a7:bd:14:4b:8e:be:
00:2a:36:45:2a:31:f7:fd:ad:51:09:90:01:ce:f8:
5f:99:1f:2f:3f:b9:0f:af:6a:6c:fc:e0:05:3b:73:
27:bd:c5:3d:b9:7b:2e:2d:0f:77:81:ed:dd:4d:94:
36:b3:87:7c:27:57:fd:49:d0:03:a5:9e:4f:13:da:
a4:5e:02:b7:22:3b:6b:fe:4f:46:62:de:08:5f:d9:
57:94:7f:a3:13:45:5f:ed:4a:33:a2:a2:66:11:e5:
56:a1:3a:0a:e4:ed:b7:aa:41:cd:65:24:58:a8:85:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:BC:DE:CE:06:38:04:FB:2A:C5:0C:12:96:A0:3A:40:01:04:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212623
Signature Algorithm: sha256WithRSAEncryption
28:2b:c9:b8:34:6d:59:7c:b1:02:6b:4c:8f:55:20:66:44:08:
08:04:dc:de:db:50:97:d1:90:2e:83:a3:28:4b:16:eb:96:30:
57:ce:d5:c4:23:ab:b3:f3:69:07:3b:22:21:a3:32:23:39:64:
11:75:9e:99:fb:c9:ff:d7:2a:b6:f7:17:bd:0e:3b:e6:fd:52:
05:16:a9:a6:d0:ec:99:8d:50:8d:c6:84:14:4a:35:7a:41:a4:
20:c8:27:29:89:c1:8b:da:58:c5:50:07:78:b1:96:e3:94:9b:
6d:d7:9d:cc:0c:79:4a:eb:16:c7:21:78:7b:82:6c:6c:00:58:
52:20:14:0c:80:c2:7c:97:35:00:0c:c5:2e:ad:5c:5b:10:b0:
4d:8b:8c:29:b2:5b:6f:68:6e:f2:5d:ac:6f:7d:b2:a0:f5:47:
94:cf:d8:12:c0:19:fb:91:a6:4c:19:b0:35:ff:72:bb:66:c0:
a2:4a:00:a6:93:30:0b:1d:f6:75:6f:0f:99:bf:7c:1c:8f:da:
d6:88:1e:bd:2e:ab:66:cc:6c:33:e4:02:f1:7b:83:cc:e6:da:
05:5b:02:80:b8:a1:c1:3a:4f:9c:99:e7:b9:a0:6e:49:6d:82:
29:1f:63:79:5c:99:e1:b5:05:f8:38:54:59:c8:3c:31:fb:44:
9d:37:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:44:47 2024 by rpki-client on console-ams.rpki-client.org