Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
File: _sQT3TZn54GV5SaKooWupRa8sZk.cer (raw, json)
Hash identifier: b+xgy8GX92RhyqpKUSk5RF70wKsokEdxX42efZrIF9k=
Subject key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC870B7BFD82D15363C778AB648C6D59F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204846
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:b7:bf:d8:2d:15:36:3c:77:8a:b6:48:c6:d5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec413dd3667e78195e5268aa285aea516bcb199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:6a:3f:0a:f0:45:e0:9f:76:46:43:f0:59:
41:27:5f:61:10:76:f5:34:0f:88:b5:7c:b0:4b:68:
89:7a:4a:c8:5e:bf:5e:46:96:37:14:e5:99:87:21:
22:f3:0e:db:50:3f:3b:b6:89:d1:9f:bb:5f:7a:e6:
73:ad:3f:7c:f8:7b:06:18:b9:62:33:c0:06:a1:94:
80:1d:cd:d4:41:2e:49:88:d7:bb:93:b8:a2:6f:e3:
fa:28:55:49:4a:73:83:0e:51:e1:83:04:e9:94:ab:
6a:5b:97:9b:3a:60:82:d1:1f:60:0c:d6:9b:e9:b4:
dc:b1:24:b6:db:e1:90:0d:d8:b6:d7:7d:8e:cb:af:
f2:e1:23:20:b7:7c:18:dc:d7:2f:e1:37:03:78:4d:
88:36:36:9c:4d:9b:f5:da:7c:96:eb:bd:27:a0:88:
ea:17:39:33:34:bc:53:58:34:db:7a:e4:f8:f3:d4:
70:b7:cd:47:ed:a5:8d:d1:6c:df:a9:91:79:e8:49:
ad:77:9c:1d:66:c2:7a:94:c8:4b:65:d7:72:bf:8c:
c7:b6:6b:d4:84:3c:e1:f4:6e:18:cf:4d:73:bf:c3:
22:ca:15:35:86:1a:9f:67:27:df:65:b1:35:bd:a4:
7f:1c:bc:70:8a:6a:c9:e5:68:3b:8f:60:59:28:29:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204846
Signature Algorithm: sha256WithRSAEncryption
24:63:41:20:ad:0d:2b:27:88:11:5d:27:e3:40:ca:0b:b2:3a:
13:d6:cc:d9:19:c1:15:57:01:18:93:d6:74:8b:ed:ee:60:2f:
0a:60:9c:c1:46:cb:39:a9:29:cd:4b:a5:5a:18:c5:41:09:61:
3a:d0:24:62:04:b5:59:5e:07:c8:5e:a4:cd:f6:8f:d4:1d:7d:
54:cc:de:f1:3d:5a:b1:82:86:30:a0:62:26:a3:e7:a4:04:48:
60:4c:4c:cc:99:65:fd:90:60:13:63:d9:b2:f0:01:32:26:11:
c9:44:cc:4b:fc:fb:af:55:03:40:9a:ed:5e:12:09:e7:38:47:
b0:79:08:af:d8:e2:33:5d:a4:ac:44:15:55:67:38:5e:41:e6:
a1:77:4e:1d:4b:92:0c:69:81:a9:c8:79:26:80:1a:28:b3:89:
52:1e:51:11:03:10:75:f3:79:8b:7b:19:26:a0:40:7c:8d:33:
7b:2b:a8:fe:a0:9f:1f:db:08:72:33:aa:f6:c4:75:8e:94:cf:
f7:e2:47:d4:e8:25:6b:c4:a4:e1:56:bb:5e:23:48:8f:da:49:
19:0c:3d:75:1a:55:71:b8:63:a4:4a:0c:ee:46:ba:2b:46:6e:
17:57:3e:b4:df:e7:7c:99:48:5c:c5:6e:b7:a1:1b:40:ad:74:
bb:78:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:12:35 2024 by rpki-client on console-ams.rpki-client.org