Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_zZQWJdnAfshmkFt2OfvSAokiIY.cer
File: _zZQWJdnAfshmkFt2OfvSAokiIY.cer (raw, json)
Hash identifier: Gn3lwBTzA+PCGttxHiKMbvh1OMpJqXUpGs3JubUl4Xk=
Subject key identifier: FF:36:50:58:97:67:01:FB:21:9A:41:6D:D8:E7:EF:48:0A:24:88:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01905F9FF1B33AC0611822B8BAEFC9F98FED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 28 Jun 2024 16:13:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215885
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:9f:f1:b3:3a:c0:61:18:22:b8:ba:ef:c9:f9:8f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 28 16:13:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff365058976701fb219a416dd8e7ef480a248886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:9c:a1:97:1c:d7:ee:10:5d:6f:3a:3e:1b:
e1:da:c7:80:a4:d6:92:24:34:93:91:3d:12:06:a0:
ec:0e:7d:d7:57:2f:47:9e:43:ed:1f:dd:ca:3d:78:
a3:0d:8a:a6:78:9a:42:a9:81:a1:79:2a:74:b0:8d:
0c:21:d8:45:bc:cc:1d:d1:a9:9c:40:dc:11:ea:8c:
c8:78:83:68:9c:e3:c5:82:a8:c5:f8:ce:9b:d4:37:
12:35:62:29:d8:d5:46:76:b0:2c:55:3e:4d:33:ac:
1c:e2:fc:20:1e:c5:bd:b1:3b:c5:b7:11:61:d8:ae:
71:a1:0a:24:fd:64:ea:cb:c2:15:5c:5e:0b:4a:3e:
81:5b:df:3d:63:5b:ca:45:00:ba:7c:ff:f1:c5:fb:
5d:64:44:5f:2f:d3:df:d7:17:e2:fe:65:79:21:4a:
8b:81:61:63:58:e6:28:08:fd:bd:27:8d:82:01:b0:
35:a3:72:58:25:f0:3b:70:54:32:ee:f9:da:01:12:
b1:3a:54:0c:26:f1:db:de:0a:8d:1a:80:64:b6:79:
9e:cd:ea:35:89:66:29:3f:14:dc:05:71:4c:7d:f9:
60:09:26:d1:9a:75:85:a2:64:c6:8d:f2:f6:4f:bb:
bf:ae:6a:e9:1c:10:dd:3d:9d:76:91:b6:c2:08:26:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:50:58:97:67:01:FB:21:9A:41:6D:D8:E7:EF:48:0A:24:88:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215885
Signature Algorithm: sha256WithRSAEncryption
80:dc:d9:b6:0e:30:cb:ca:93:39:33:38:4c:dc:be:7c:66:79:
af:06:f8:51:33:c3:94:dd:db:c8:73:04:b5:8b:0b:d4:02:dd:
00:14:6f:b2:43:42:15:a5:f2:ab:e1:1e:53:b7:66:33:cc:fd:
ea:08:0f:30:06:05:8e:77:17:ff:e9:4e:4e:ce:37:e4:fe:9c:
82:03:57:6e:da:c2:35:6f:29:63:e9:69:1a:e9:b4:36:e8:5c:
8c:2c:67:22:14:bd:04:2d:4f:f5:0b:29:41:99:29:1b:54:8f:
5c:ea:8b:e6:08:2e:60:b2:7e:86:0c:86:45:da:c3:f7:60:c9:
c0:58:e4:a3:0e:71:89:20:2a:8a:53:0c:81:70:ac:fa:3f:f0:
0c:2a:1a:b2:59:a0:b7:fc:4e:96:aa:14:b5:57:24:07:3a:44:
06:d5:bf:fd:e6:ec:73:31:2b:1a:7f:ad:2e:38:0d:b3:65:77:
32:cb:51:21:79:82:69:de:9b:6d:87:4f:28:0d:bb:f3:30:16:
19:5d:05:69:44:26:5e:e8:2f:aa:08:84:84:b9:b5:63:b5:fd:
e4:8a:32:4d:4d:bc:b9:e7:97:c2:b9:6d:95:f2:7c:02:0c:89:
62:8a:d5:cb:e7:5f:c6:5e:8a:0d:55:39:ef:50:8b:35:27:a9:
ad:b5:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:04:09 2024 by rpki-client on console-fra.rpki-client.org