Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
File: X06OdhPaoX6FqhB4yOwlXPGNQio.cer (raw, json)
Hash identifier: Z67apPhbQR5baylzvxVrtstvM7jAvfoQldLSioppjjI=
Subject key identifier: 5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493246FE13B31C945B0F0D5D4295486
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208696
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:24:6f:e1:3b:31:c9:45:b0:f0:d5:d4:29:54:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:b3:a1:51:e6:8f:40:45:f5:66:14:34:b5:
b4:32:ea:3a:85:2e:6f:d5:1e:45:74:73:aa:8b:c6:
a0:48:72:18:4a:86:a8:d3:59:1d:93:80:9e:a2:1f:
87:ea:d3:45:52:12:61:f4:98:2d:44:c7:03:a4:78:
89:66:83:f7:c1:81:0b:61:c8:22:58:32:7f:76:3b:
1e:4b:72:53:9a:3e:8c:76:99:1e:64:e0:2f:41:e6:
07:a8:e8:e2:75:f0:90:73:c0:8f:4a:32:3b:25:e3:
81:db:1d:2e:c1:07:5b:f4:9e:fe:31:e5:0c:1a:15:
28:13:b0:75:e5:0c:cd:b8:f5:da:61:fa:50:58:bf:
7a:31:09:d3:82:ec:70:3e:f6:90:fc:67:0f:0e:22:
28:c3:35:e7:6c:60:dc:4f:44:86:cd:07:45:b4:5c:
db:e7:b0:37:86:8f:79:cd:c2:4e:da:c9:73:dc:86:
9d:db:e1:85:2f:a4:9a:78:58:04:ff:e7:ac:6b:f1:
47:d7:91:4e:a7:12:e0:29:dd:23:59:21:8f:2e:9c:
15:af:cd:c0:3c:fa:12:53:28:a4:0e:0a:1e:14:e7:
4f:2b:3f:81:65:5e:46:f7:9c:ed:ba:8a:48:a9:c9:
ac:e5:c9:59:1a:3f:9b:7f:16:e9:b8:67:69:a1:c0:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208696
Signature Algorithm: sha256WithRSAEncryption
07:6e:83:a7:61:a0:6a:01:e4:1a:b5:5e:ee:d1:77:7c:b1:09:
29:3b:cf:05:39:68:92:b6:a6:ca:a1:64:84:d1:83:a2:a1:55:
f5:94:dc:d9:3d:43:55:60:d5:8f:14:61:6e:ce:0b:c2:65:da:
d5:66:72:32:7c:4c:af:2f:eb:dd:e9:42:27:75:ce:f8:b8:62:
36:cf:35:41:cf:5b:fc:be:5f:2a:2c:c7:e0:a3:c3:6e:45:99:
c7:da:1f:d9:93:cf:82:79:4f:e6:71:41:73:97:bb:35:9f:96:
5b:2b:de:f3:f3:de:c0:ce:78:77:6d:e6:a1:bd:ce:c5:ed:40:
82:5c:4a:89:9c:8f:8f:fa:b6:4d:7d:68:40:6e:19:7b:8a:95:
a9:39:8e:f1:0b:ae:7e:96:d8:2c:9f:e1:d6:d5:97:ab:1e:1d:
0c:89:ac:c2:51:76:51:eb:30:93:5a:09:51:df:19:27:5e:14:
02:ea:8f:30:af:b4:41:17:ea:a0:39:f2:ba:c9:fc:16:38:1e:
c4:f9:97:e9:ed:93:ef:fd:eb:c8:d6:60:b1:63:69:3d:34:94:
fe:2e:77:72:42:d6:5a:b1:ab:76:bc:3f:07:76:cf:ab:fb:4b:
78:00:58:84:0f:4a:de:90:ad:35:f7:81:be:b2:b5:78:73:ff:
ca:ad:45:33
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzEkyRv4TsxyUWw8NXUKVSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjRlOGU3NjEzZGFhMTdlODVhYTEwNzhjOGVjMjU1Y2YxOGQ0MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAuzoVHmj0BF9WYUNLW0Muo6hS5v
1R5FdHOqi8agSHIYSoao01kdk4Ceoh+H6tNFUhJh9JgtRMcDpHiJZoP3wYELYcgi
WDJ/djseS3JTmj6MdpkeZOAvQeYHqOjidfCQc8CPSjI7JeOB2x0uwQdb9J7+MeUM
GhUoE7B15QzNuPXaYfpQWL96MQnTguxwPvaQ/GcPDiIowzXnbGDcT0SGzQdFtFzb
57A3ho95zcJO2slz3Iad2+GFL6SaeFgE/+esa/FH15FOpxLgKd0jWSGPLpwVr83A
PPoSUyikDgoeFOdPKz+BZV5G95ztuopIqcms5clZGj+bfxbpuGdpocD1cwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFF9OjnYT2qF+haoQeMjsJVzxjUIqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzcwYmZk
Ny03MTFkLTRhZDktODJmNy0yZjNjMDAzMmU0NDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvNzBiZmQ3
LTcxMWQtNGFkOS04MmY3LTJmM2MwMDMyZTQ0Ni8xL1gwNk9kaFBhb1g2RnFoQjR5
T3dsWFBHTlFpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMvODANBgkqhkiG9w0BAQsFAAOCAQEAB26Dp2GgagHk
GrVe7tF3fLEJKTvPBTlokramyqFkhNGDoqFV9ZTc2T1DVWDVjxRhbs4LwmXa1WZy
MnxMry/r3elCJ3XO+LhiNs81Qc9b/L5fKizH4KPDbkWZx9of2ZPPgnlP5nFBc5e7
NZ+WWyve8/PewM54d23mob3Oxe1AglxKiZyPj/q2TX1oQG4Ze4qVqTmO8QuufpbY
LJ/h1tWXqx4dDImswlF2Ueswk1oJUd8ZJ14UAuqPMK+0QRfqoDnyusn8FjgexPmX
6e2T7/3ryNZgsWNpPTSU/i53ckLWWrGrdrw/B3bPq/tLeABYhA9K3pCtNfeBvrK1
eHP/yq1FMw==
-----END CERTIFICATE-----
Generated at Fri May 3 13:47:11 2024 by rpki-client on console-ams.rpki-client.org