Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
File: bdAj-z-UyML6I8q4AZRm-hp_UQk.cer (raw, json)
Hash identifier: 4Zj9UThRWZnT/s63xigIUNOSl+QDXhyXRWgTbo4V7bM=
Subject key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01908E7483DB3D0D653252419F10E2BEC606
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 18:28:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207885
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8e:74:83:db:3d:0d:65:32:52:41:9f:10:e2:be:c6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 18:28:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:a1:13:1d:4b:cf:8a:9c:1d:03:30:08:01:
23:b7:c4:a2:65:a0:50:2c:dc:f5:9b:54:1d:4c:92:
e6:59:84:8b:33:78:b4:05:54:a0:b5:c1:e6:96:ee:
75:ab:5a:71:2d:8c:8d:d0:3b:c4:14:6f:ce:91:84:
4d:08:cf:c7:61:e8:28:c6:0d:74:77:b6:4b:78:77:
fe:69:62:72:db:cf:85:53:a6:43:65:c5:4c:5e:84:
5d:c7:b6:b6:11:14:93:4a:a2:99:fa:22:c8:d0:fc:
26:a3:eb:01:54:c4:ab:b9:e6:79:d0:1f:06:36:6b:
99:38:dc:71:28:e1:9f:40:fb:16:6f:f5:bb:aa:7c:
97:13:66:88:10:ca:69:27:65:a2:9c:b6:6b:55:0b:
27:bb:70:c9:15:6e:bf:9e:9f:d4:85:66:a3:c1:3f:
eb:84:d9:7c:8d:98:4f:c1:4a:e2:20:d4:bb:46:d3:
26:8d:aa:de:10:e7:74:b4:97:73:72:c0:3b:ab:4b:
42:0d:5e:50:f6:4c:d8:38:74:95:af:75:f1:7d:70:
a4:5b:bf:49:9b:74:74:27:ee:7f:31:eb:c7:89:80:
70:81:e6:18:8c:04:c9:09:c9:27:8b:b3:f2:49:84:
17:97:5f:57:55:42:bd:bb:cd:4b:bf:8a:c9:24:f7:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207885
Signature Algorithm: sha256WithRSAEncryption
6a:cd:0f:1b:94:38:8e:3b:ac:ce:db:8a:64:7b:0d:68:3e:96:
ed:bf:bf:9f:d4:2f:0b:b1:8b:3a:9e:19:c8:88:55:1a:f1:9a:
89:3d:2c:c7:4a:25:e7:14:65:c5:19:bc:b7:5e:26:be:d7:c1:
6f:fa:a8:bf:31:ee:aa:fa:31:67:29:cc:ff:9e:e5:fa:d7:30:
10:75:46:2e:bd:c6:d4:1f:4a:9d:f8:46:33:8c:d4:22:a5:7d:
7a:c0:13:53:e4:45:e7:17:15:86:53:5f:41:ab:47:ba:0e:51:
a3:64:77:f9:61:4d:d0:cb:74:43:24:56:e5:4d:b5:bb:67:88:
57:b6:62:88:93:ea:ed:ee:19:12:b8:b3:aa:6a:ce:4f:93:3b:
46:1b:e8:6c:9d:7e:b4:0e:78:3c:7f:1a:d4:03:36:60:3d:ed:
31:44:dd:96:6b:ed:24:b9:87:92:14:72:a1:08:f3:65:a1:89:
25:9c:16:75:d2:ce:d7:5d:4f:64:5b:ba:c8:7e:14:06:46:8f:
40:5c:3a:ef:47:7f:e1:44:96:35:f4:eb:00:56:cc:58:09:9f:
a9:a1:00:ab:57:6b:fb:13:00:9a:8e:45:a4:f6:f2:14:fd:9c:
3d:f2:25:88:08:12:85:e0:73:6a:19:cb:38:60:f2:26:d2:a4:
34:40:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:16:05 2024 by rpki-client on console-ams.rpki-client.org