Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
File: _fnlz5EF-11F34wfudTxx6WQVMY.cer (raw, json)
Hash identifier: vAsXhFWI2AEAxiblqHcVQfq8b0Xqh2hzpI9aGiqOSKY=
Subject key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D0E9B5DA6C0468D8BA167CD910223
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209187
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0e:9b:5d:a6:c0:46:8d:8b:a1:67:cd:91:02:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:13:13:4f:85:98:eb:52:03:12:3d:09:b5:
56:32:90:84:0d:bf:5a:9a:23:d5:2a:15:9a:bd:bb:
51:25:b3:ac:08:7f:cd:d2:ec:6c:15:fa:ba:e7:e6:
28:9e:ed:c9:a7:3c:75:f7:01:82:a4:c1:9e:b9:ec:
11:14:25:b6:3b:a0:d7:a9:f4:70:d4:35:31:70:9a:
c0:1d:8a:ae:72:32:e8:a4:97:83:e7:13:60:53:90:
40:c9:f4:bc:64:1a:2f:14:6b:df:8c:9d:63:ce:04:
36:e4:9e:8c:51:f3:77:2c:2e:75:76:d4:f5:a1:49:
6d:2e:9a:22:af:19:4c:2e:6e:39:c9:43:cc:48:1e:
b3:2e:36:34:71:fa:d4:b8:5c:0d:6a:8e:51:8d:0c:
08:f7:cf:d3:d7:d4:17:ed:4e:60:87:82:bd:f2:42:
84:a5:34:20:2d:07:16:11:f5:b5:e2:70:c5:0d:1b:
b5:2c:05:bf:89:38:1f:83:bc:71:88:12:da:c1:68:
48:6d:67:03:72:cd:2e:fd:fc:ce:22:59:e5:4c:58:
03:ce:b1:d1:41:7a:bd:dc:70:ed:0f:06:82:8c:d1:
4c:cf:e2:c0:ee:36:ef:81:11:71:f3:b2:45:ab:6f:
ad:95:87:02:b3:17:58:86:c1:29:f5:bc:4b:7b:c3:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209187
Signature Algorithm: sha256WithRSAEncryption
34:a0:9e:25:e3:2f:be:a9:17:42:24:22:1e:cc:6f:e4:3d:bf:
30:9a:02:1e:fb:b8:7b:25:97:53:16:f2:93:2f:f6:bf:5c:bb:
08:79:7c:93:8e:54:21:5d:ab:c9:16:2f:cb:6e:1a:d7:6a:83:
e7:69:e5:f6:81:37:0c:29:b0:5d:33:d1:16:dd:99:a6:90:0a:
6a:56:92:40:4d:f6:f7:6f:71:68:34:ca:1b:6c:13:de:3c:60:
ed:9d:47:6e:ab:02:fa:ae:e4:8d:c1:0e:fb:e4:ba:4e:ed:0b:
47:f9:21:da:9d:99:bb:aa:15:e9:12:f4:65:95:d1:6e:ca:d5:
93:2b:5c:53:3b:5e:14:b9:e0:ee:e8:9b:d2:6d:f0:e6:48:f0:
8b:a1:b1:d8:04:38:ca:4c:ff:12:69:2d:35:8b:f7:20:05:0a:
f7:a0:e8:0a:12:94:ea:f4:10:b8:16:13:86:df:7b:bb:36:bb:
ce:01:cf:77:64:c0:cf:49:98:fd:1b:99:e0:6b:c4:ad:98:e5:
4f:32:5d:fa:be:2d:02:17:3c:39:76:3f:54:32:67:d4:e7:da:
66:0e:a7:c9:6a:67:74:8c:1f:76:0a:6d:2b:15:4c:87:33:d7:
c9:fc:35:eb:0f:b8:3f:ec:67:3a:40:4d:9c:c5:4b:5a:1f:7d:
72:c5:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:23:28 2024 by rpki-client on console-fra.rpki-client.org