Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer
File: aqr5hWj8JO10Jf91q9XxRRAfuqM.cer (raw, json)
Hash identifier: PW1N5ogQoHatTfJnS5vKjtKOLjV49svHsIcyOZIlsCw=
Subject key identifier: 6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26A3FC55E286AAB4D3806037F327673
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:26:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201398
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6a:3f:c5:5e:28:6a:ab:4d:38:06:03:7f:32:76:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:26:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aaaf98568fc24ed7425ff75abd5f145101fbaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:48:38:10:74:d5:b6:c8:05:39:e8:38:8c:
a3:68:e4:62:ff:20:b9:59:d2:29:64:6f:37:8c:a4:
e2:f3:f4:21:70:db:93:28:65:29:58:2e:3c:e5:74:
6c:e1:ee:c3:70:ff:f4:0f:b1:1e:6b:9c:b8:8a:83:
6e:88:31:8a:ed:9c:85:36:10:5e:de:f4:34:0d:da:
50:89:cf:c6:43:0c:f6:55:18:7b:d0:e9:5e:c0:82:
bc:81:1a:af:52:6b:3a:90:63:39:06:5f:70:97:6d:
be:3b:b4:16:d7:69:79:45:27:bb:8a:30:54:37:23:
17:92:d0:df:21:8e:02:ab:eb:09:93:98:9b:d2:43:
6a:63:d6:4c:19:42:14:d5:4e:d6:c0:b7:93:2a:2d:
70:2f:1f:43:07:8a:e6:0a:d4:63:03:39:1a:64:f4:
99:75:e9:61:ee:93:0b:a3:95:b7:31:78:4f:50:05:
31:b9:35:36:55:c4:0f:87:a7:7c:f1:09:21:a2:0e:
17:aa:7b:9d:be:97:60:07:70:7d:df:49:1e:91:ec:
99:bf:d4:9c:69:bd:82:c0:cc:4d:6e:44:e1:c7:3f:
d8:53:02:31:ba:f2:73:81:77:df:e9:85:0c:86:f8:
33:45:02:68:03:cf:d1:5c:52:69:f1:73:fe:f0:a4:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201398
Signature Algorithm: sha256WithRSAEncryption
85:81:08:02:35:13:3f:56:ac:e7:ac:a3:70:37:97:8d:55:8d:
af:62:fc:d0:29:9d:f6:7b:90:7c:c9:90:c6:fb:27:de:7c:07:
7e:7e:a6:1c:17:07:4c:d4:89:8a:a7:dc:8a:b8:7d:90:39:55:
77:66:7b:30:d5:29:90:a1:3c:a1:31:bf:58:59:13:38:a7:b2:
ac:8b:0f:47:41:55:f6:52:cd:be:c8:9f:82:c3:62:b1:40:8f:
c1:9e:96:a1:75:70:62:8b:8f:bf:2f:3c:11:3f:28:80:e4:9b:
55:15:66:de:3c:c0:77:9a:70:e9:ad:02:86:f4:48:b3:0e:fc:
f3:7c:5d:18:d7:d5:22:24:57:d1:94:95:71:e7:23:5e:2a:11:
bd:38:ce:ce:04:ef:ea:64:36:47:54:bd:2e:9e:27:40:6c:54:
23:78:f6:7f:07:27:5c:09:49:ab:8a:ac:96:99:26:fb:ac:d5:
59:66:db:46:5b:c8:ac:e1:d0:9a:0d:ab:d1:a6:d8:0d:3e:5b:
8f:51:0d:26:b6:43:33:7a:ab:c0:bd:3b:e2:38:10:e2:fa:88:
e0:e1:5b:41:d8:6b:b2:49:d0:06:31:64:04:4d:60:cc:cd:b3:
4f:37:d2:98:d5:dd:a4:e2:dc:89:70:d0:19:33:af:ce:56:ec:
d7:8a:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:11:55 2024 by rpki-client on console-fra.rpki-client.org