Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aqrcGXZY5YjFQ7QiJp_cfeCw2fo.cer
File: aqrcGXZY5YjFQ7QiJp_cfeCw2fo.cer (raw, json)
Hash identifier: ZwZ8pY+cHqqc+suC2OGPuTmAnGQp2MrHe7+ncj/PFao=
Subject key identifier: 6A:AA:DC:19:76:58:E5:88:C5:43:B4:22:26:9F:DC:7D:E0:B0:D9:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49B421F14D8D3ED26D4140B3546A2BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/moeqing/0/6AAADC197658E588C543B422269FDC7DE0B0D9FA.mft
caRepository: rsync://rpki.co/repo/moeqing/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 10:39:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200105
AS: 210979
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:9b:42:1f:14:d8:d3:ed:26:d4:14:0b:35:46:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aaadc197658e588c543b422269fdc7de0b0d9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:2d:0a:bb:ec:2f:a5:95:2e:cc:ef:3f:f7:
b9:3f:84:96:80:a7:3a:3a:8b:e1:fa:93:55:a2:2f:
31:1a:da:40:ca:78:0b:38:ef:9e:71:ab:4f:4b:10:
22:05:a9:6d:3d:b6:8f:20:79:bc:e2:a9:91:78:2e:
50:6b:ac:5d:89:3f:ea:d1:9c:a9:58:9b:31:39:fb:
ca:3c:4f:02:d1:18:28:3e:ed:9b:61:38:1b:9f:15:
e3:b0:07:6a:f2:c6:b3:24:3c:39:f7:56:1c:55:69:
a6:cb:9c:71:cc:71:29:9b:7d:69:74:eb:62:0e:7c:
9b:23:37:f3:21:18:6a:6d:c0:ee:50:44:13:2e:5b:
1b:e2:a0:fb:a6:3c:72:c6:da:0a:a5:f7:6f:80:51:
d4:82:f1:90:0e:58:da:be:44:9f:dd:b0:78:e0:da:
f7:b2:d1:c4:f3:6e:cd:b0:b9:01:67:27:1e:79:af:
4f:46:a0:1a:f2:39:e7:8f:63:5a:64:ee:7a:41:54:
c1:52:01:46:45:76:07:5c:68:50:54:20:6b:ed:6e:
b2:44:fb:24:85:9c:f2:e2:52:e3:00:d2:e4:74:29:
7c:93:2a:5d:f6:09:23:86:9a:b1:fd:84:0d:0b:3f:
ad:b5:95:05:9b:f4:19:df:5b:e1:d7:ee:e2:d7:9c:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:DC:19:76:58:E5:88:C5:43:B4:22:26:9F:DC:7D:E0:B0:D9:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/moeqing/0/
RPKI Manifest - URI:rsync://rpki.co/repo/moeqing/0/6AAADC197658E588C543B422269FDC7DE0B0D9FA.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200105
210979
Signature Algorithm: sha256WithRSAEncryption
33:29:b2:fa:bb:d1:e0:26:69:52:56:56:cc:f4:1b:4a:cc:d5:
85:5f:23:1a:65:ae:bd:4f:df:72:0f:5e:87:5c:15:86:4a:9d:
11:37:d1:0f:d5:b1:a4:ad:55:98:3e:4d:cd:77:fd:bb:53:70:
ff:1b:92:cd:1b:9d:14:fa:30:81:02:40:cd:1a:e0:fd:c9:a6:
56:1f:79:df:fc:4c:a6:f1:44:8d:9a:fb:13:78:9a:01:2d:b5:
8c:45:ec:a5:a8:fd:2d:16:54:df:bb:98:51:13:d8:be:5d:01:
91:44:e1:22:b1:b1:2f:3f:52:94:60:5e:50:ab:d0:68:b3:dc:
bd:9d:8b:e9:36:a0:09:ad:4f:d3:b9:58:aa:ac:ed:6a:f8:7f:
1a:27:68:3b:25:b4:d6:99:60:d4:ad:99:21:af:c0:9c:d9:05:
56:ce:ba:16:fb:94:fa:4c:2d:b6:4f:02:64:fc:94:b9:18:69:
43:27:b5:92:b2:b4:b7:3a:ea:f3:4a:32:ff:39:b5:19:8b:89:
f1:07:14:c7:c8:38:88:d3:7c:e8:a5:db:7d:cc:de:87:c8:4f:
c4:aa:ad:79:c1:20:39:b0:3f:3b:b9:3a:b5:78:72:5d:9c:c0:
92:4a:b6:8b:3b:00:84:77:a5:50:6a:be:3f:16:1d:4c:86:b1:
b8:ef:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:11:56 2024 by rpki-client on console-fra.rpki-client.org