Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_SkSyDqkFwYd35nNrtBg5vPR4pU.cer
File: _SkSyDqkFwYd35nNrtBg5vPR4pU.cer (raw, json)
Hash identifier: 8TiWiObbIut4qjiGJyM2OYA+SXWTi/vSERxsBo8olGM=
Subject key identifier: FD:29:12:C8:3A:A4:17:06:1D:DF:99:CD:AE:D0:60:E6:F3:D1:E2:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF8F4658CB9761BE8EB065F90D26EC8D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/FD2912C83AA417061DDF99CDAED060E6F3D1E295.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 11 Jan 2024 14:36:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199582
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:f4:65:8c:b9:76:1b:e8:eb:06:5f:90:d2:6e:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 11 14:36:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd2912c83aa417061ddf99cdaed060e6f3d1e295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:2b:44:1a:50:ee:70:73:26:72:1e:16:cd:
43:41:3f:10:49:03:ab:25:63:71:44:da:6e:34:b9:
08:7e:a1:36:31:e9:1e:4d:47:0f:79:c8:e6:fc:5e:
c4:cd:db:5d:99:d8:16:8c:0f:ae:13:a5:d5:ea:a6:
08:f5:2b:b9:79:a3:2a:1c:39:97:f9:a9:d9:49:17:
14:03:65:57:cc:40:7a:2e:74:1c:5b:9c:96:38:7f:
cd:b1:dd:13:96:fa:43:7e:ea:f4:f6:cd:95:f7:32:
e7:ef:39:d3:7b:62:db:cb:92:6e:fa:56:ed:fd:3d:
52:8e:9e:4a:6b:60:4c:5b:be:78:78:65:f9:bd:a6:
ab:30:b7:f7:79:48:5a:59:78:d7:d0:bf:a6:dd:7b:
52:05:90:64:ae:d2:4f:89:24:2b:e3:94:ad:70:12:
50:00:10:ce:84:9d:a5:e8:ac:d6:20:b5:20:84:bc:
0e:5c:1b:97:37:e2:25:73:a3:d8:8b:62:67:6a:e7:
1b:b3:04:e2:c6:2f:f5:b8:bf:35:79:d5:74:92:c2:
cd:57:e0:26:e8:66:1a:bd:dc:63:54:df:4e:bd:d1:
0f:25:48:ab:e9:f4:0a:d4:cd:89:8c:e0:a8:d8:67:
35:f8:c8:f6:62:fa:27:80:4b:7d:d4:fb:10:8e:d3:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:29:12:C8:3A:A4:17:06:1D:DF:99:CD:AE:D0:60:E6:F3:D1:E2:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/FD2912C83AA417061DDF99CDAED060E6F3D1E295.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199582
Signature Algorithm: sha256WithRSAEncryption
7b:12:62:f8:2a:7a:7d:12:79:ed:45:1b:c7:19:67:36:93:cf:
04:f1:d5:cd:6c:02:21:5e:c3:01:32:bd:39:ff:96:89:e6:60:
b4:c8:0e:36:4f:46:a0:1b:54:b7:01:1e:7b:57:8b:57:09:c8:
59:62:1c:7a:e1:ca:38:1a:d4:1c:ae:ab:92:2f:b7:75:ff:c0:
18:57:a0:80:94:f0:9f:e3:34:04:ce:cf:e3:62:95:ef:94:80:
6c:67:cd:dd:03:b0:ad:32:53:bf:ac:39:c4:5b:62:10:e0:03:
b0:78:b1:5d:25:ea:81:65:9b:40:a4:a8:58:b3:40:ac:0e:7e:
2f:ca:2c:11:4d:8b:6a:72:8b:f6:cc:87:cc:27:0f:2e:41:a4:
f7:3b:33:df:27:0a:2b:e2:e6:24:f6:20:f7:f6:fa:60:20:10:
c2:3e:72:e9:05:e1:0b:04:4e:44:0d:b5:5b:03:a7:e6:97:90:
88:6c:77:69:0a:a8:d0:3f:20:5b:1c:1f:5e:a0:67:78:31:a3:
24:37:3e:1b:cb:30:24:1b:4c:ab:9a:e7:ba:55:29:fb:90:16:
52:25:71:85:58:41:70:c6:f7:1b:2e:5f:a5:c3:61:e6:62:01:
0f:3c:3c:18:2b:16:64:8e:11:6e:70:b6:28:a8:9d:bd:90:b0:
8d:46:91:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:25:15 2024 by rpki-client on console-fra.rpki-client.org