Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
File: az921hCBSGU2b6pnz8Za0GnHz8Q.cer (raw, json)
Hash identifier: R7ReC5hmQJhFIZoq3uU2qejB+5M3Ivutu+YbbL4qn9U=
Subject key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DCC1663B84180011BE5CFEC3A3B9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202842
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:cc:16:63:b8:41:80:01:1b:e5:cf:ec:3a:3b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:d1:09:52:52:fb:3d:1e:87:06:21:2c:d6:
bf:3f:6c:ab:c1:9f:e8:97:3c:ed:10:ef:1c:cb:bd:
d7:8b:b6:61:64:ba:79:fe:cc:7b:3a:61:04:cd:fb:
1f:7f:12:60:f2:87:38:d6:6b:97:53:92:fe:1d:d7:
c8:44:53:ac:ea:40:73:69:89:5c:c7:9e:c4:e6:77:
15:64:bb:54:3b:ae:fd:4a:f3:4d:fc:10:69:80:0f:
c0:9a:ff:af:ca:3d:e2:10:34:80:ad:56:18:9d:54:
74:3c:a8:dc:72:e7:c5:97:ff:81:9a:3f:ec:d6:52:
59:8b:1f:5e:a6:31:ef:26:24:18:d4:49:24:03:32:
6e:f4:76:bc:92:04:bb:a7:d6:46:1a:59:83:b4:2d:
1e:91:91:f0:c6:50:f5:8e:7a:08:95:99:1f:b5:8e:
63:6c:20:99:9c:09:3d:97:37:3c:89:68:36:d5:6b:
4a:18:a9:6a:1a:2f:8f:ad:8a:ac:c6:6d:c8:27:f8:
d1:ee:27:3d:ae:6b:c1:a8:7c:10:53:75:56:5a:fe:
3f:3a:00:69:93:b6:50:ed:51:ad:9d:7b:e0:25:3d:
45:ae:9c:5b:cc:65:f0:b8:c2:df:2f:eb:d8:d7:46:
0e:55:4c:8b:69:b8:80:23:8f:44:c9:38:8b:86:9f:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202842
Signature Algorithm: sha256WithRSAEncryption
a1:4e:16:63:80:af:15:2f:2e:6c:e8:b8:7f:d0:c7:58:a4:69:
fb:95:60:b4:67:8b:6a:cd:e9:f3:60:85:8b:4e:f4:16:5d:68:
1b:e1:e6:ad:b1:cd:44:53:a0:9c:b4:af:c7:52:66:3f:92:ec:
97:6a:73:cb:b4:c1:dd:97:d6:d7:bd:94:4c:b4:10:b9:39:49:
65:3e:91:5a:e6:91:05:45:b3:50:8c:e6:eb:39:a4:0a:b9:1e:
04:85:b3:26:07:74:bd:1d:b3:16:59:7a:f6:77:47:e9:53:cd:
2f:2e:91:93:06:c1:59:b7:32:b7:dc:6a:3e:0c:ff:4c:db:c3:
b4:d7:e1:4c:01:75:20:91:88:ee:57:58:e5:b3:1e:7a:20:a6:
63:22:13:c3:9a:f3:64:d2:dd:06:b7:ce:ba:26:65:c2:09:03:
05:81:41:87:40:9a:b4:f3:a3:cb:85:85:0b:fa:c2:b5:d5:ba:
5e:16:e4:a3:ac:50:a2:7c:a8:ec:c6:3e:1b:bc:5a:70:c9:96:
7f:1d:11:51:b5:20:2a:e3:bc:18:2b:1e:f0:3a:81:dd:99:eb:
9f:07:88:05:3f:9b:6d:75:b7:2d:eb:f9:2c:b5:9e:a8:1f:41:
24:90:d7:f4:ea:8e:07:35:64:d6:60:8d:ca:8d:e9:61:8a:f1:
97:0d:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:30:08 2024 by rpki-client on console-fra.rpki-client.org