Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
File: _08LNYy9bFTsy-vyb20aBfHVN-g.cer (raw, json)
Hash identifier: 4njm6xNptfrRrFKOWE4HG/rwTJaq2CJ8Q+xYwfrfKwk=
Subject key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191C93F8CAB11ACC990F12302EF10E55FA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 06 Sep 2024 21:31:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214312
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c9:3f:8c:ab:11:ac:c9:90:f1:23:02:ef:10:e5:5f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 21:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:85:b7:ad:74:b9:74:37:83:cc:fd:2b:ac:
83:a8:16:92:60:b1:a8:95:2d:0e:b4:cf:3a:96:d7:
b2:76:57:09:80:de:76:2a:cf:72:e8:67:55:a6:d8:
c9:83:21:46:f4:57:6b:72:99:72:b6:cd:01:9e:d2:
62:12:f7:30:e9:db:fa:e3:40:08:68:4a:bc:41:ab:
10:c5:c5:9e:b0:85:26:1c:f4:8d:4b:33:85:7c:4f:
0e:e3:34:36:61:55:32:a0:7f:fa:8b:91:06:f2:19:
17:55:94:d4:b1:6e:4f:b0:e9:60:e0:43:44:4f:8d:
79:44:a2:b7:37:43:aa:49:e8:a4:af:52:a0:bc:b4:
80:cc:4b:9d:4b:e4:b8:56:72:5d:41:83:34:26:fd:
4e:e8:85:41:e0:de:19:9f:21:d5:fd:52:5e:a1:b1:
4c:fe:f0:81:53:8e:de:c6:64:4c:d2:4a:02:42:6d:
ef:49:6c:45:70:6c:72:68:47:d0:58:bd:b2:ef:a7:
da:07:33:43:49:16:05:53:85:6f:fb:74:bf:27:dc:
25:d2:85:63:11:fc:d8:d9:db:ef:f1:19:9d:6d:92:
bc:cc:16:0a:74:a8:84:5e:83:06:36:04:59:4b:9d:
a1:05:63:aa:07:dc:1e:8b:e2:28:e7:85:03:cc:fd:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214312
Signature Algorithm: sha256WithRSAEncryption
52:82:d4:aa:e9:5a:e3:0e:cb:80:c2:f5:eb:af:c0:9e:1c:04:
18:76:e8:d5:08:99:24:46:61:0a:13:8c:4a:7c:3c:4e:35:71:
bb:fe:58:54:fe:6f:04:29:23:20:59:53:19:2b:76:d2:21:cf:
51:b9:02:83:5c:01:89:10:64:e9:36:84:1b:b3:83:49:cb:e7:
f4:1a:42:92:39:fa:be:79:c7:6d:6b:d7:c3:be:bb:3e:f3:01:
b8:cf:a2:4f:00:58:9c:93:08:4a:0e:19:7f:44:16:c1:cb:5c:
c5:d3:2d:6b:a4:1c:97:94:5f:36:23:69:d2:4e:3b:ff:74:1f:
8c:e2:32:54:64:c8:a1:9a:91:64:ed:e7:eb:b5:6d:07:50:83:
70:e6:1b:c1:a9:dd:b3:10:7b:68:f7:95:ac:fc:63:ef:ec:62:
98:e5:60:12:1c:4a:a8:d7:2c:74:a9:47:ae:72:c6:f0:36:6b:
60:59:b4:14:19:c9:08:8b:48:06:dc:c5:01:05:88:fe:90:71:
8d:37:d3:80:eb:8e:c5:97:97:65:1a:2e:f4:ef:ae:43:3c:1f:
51:2d:79:9c:c7:a3:dc:b0:15:f4:99:ae:fc:02:33:f5:ce:26:
f2:60:61:a0:ba:29:89:7e:cf:f8:37:c1:ae:d3:f1:5b:a3:eb:
ad:68:82:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 12:41:42 2024 by rpki-client on console-fra.rpki-client.org