Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
File: dtQhWmJUV7wFMhkciAP3xkt_kGU.cer (raw, json)
Hash identifier: H34xhnuHhQ6K1kFHoMzHSyOHgqC1cHwh/a3KoyusFBw=
Subject key identifier: 76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190E0335C122B7CE67B3937E9ADBA8516B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Jul 2024 15:26:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214532
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:33:5c:12:2b:7c:e6:7b:39:37:e9:ad:ba:85:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 23 15:26:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76d4215a625457bc0532191c8803f7c64b7f9065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:12:ba:e4:1c:e0:fd:c7:9e:10:5f:0e:bf:
d4:bd:13:22:a1:72:7c:00:1c:ad:0f:78:3f:b4:d7:
9a:25:81:84:8f:59:5e:3d:c6:73:e1:1c:37:f2:d4:
c6:03:5d:57:d0:87:9e:a8:48:59:84:b6:81:eb:32:
e2:e9:dd:a7:c0:3e:cf:34:95:c0:d6:1f:29:a3:0c:
6a:ba:bf:41:45:37:f0:2e:e9:63:e1:22:be:3f:45:
d3:14:07:89:cc:8e:3a:8c:f9:b7:07:b2:5d:83:9c:
93:0e:d0:d7:00:e2:71:3e:aa:e1:a3:33:7e:85:c3:
60:2e:45:89:60:ad:72:ec:4c:34:85:f4:a0:e5:0e:
f1:e7:a9:07:2a:8c:7e:d5:d5:06:b0:9d:9c:99:4e:
45:3e:73:c6:d4:16:6b:8c:58:45:1f:50:ee:c1:16:
2c:9f:b8:53:f3:e8:45:34:48:60:1a:69:f3:f5:d6:
22:21:97:99:57:cb:26:58:b4:94:13:19:6e:d3:bd:
11:b4:5f:4b:69:b3:c4:56:0c:db:03:83:74:9d:02:
0d:91:7d:7f:d9:ed:bb:03:f1:fe:ff:0e:23:b5:ca:
d7:8c:c2:f2:1a:dc:82:f4:20:c8:f7:da:d5:00:42:
dd:a1:29:13:8b:42:52:68:9a:0c:00:e3:57:c3:42:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214532
Signature Algorithm: sha256WithRSAEncryption
4a:0c:8f:bf:27:b1:0a:37:f4:d1:eb:e3:61:58:b2:40:24:c1:
71:12:6c:f7:69:fd:51:60:77:1a:47:df:5f:0f:00:93:e0:88:
22:bb:83:9b:9f:e7:21:c6:86:0a:02:f0:ec:be:39:f7:65:92:
93:01:9f:7f:25:75:37:e1:30:c2:52:8f:3d:db:2e:f6:d1:6a:
b6:5c:8c:c1:a5:0a:dd:e1:b6:25:09:d4:a1:04:05:64:e3:2c:
1a:14:ac:98:e6:91:a7:f9:39:c5:0a:e2:0a:37:38:4a:4f:bd:
bd:4a:d6:9c:f6:88:51:0f:23:16:aa:e1:f7:c7:87:28:00:6d:
aa:4d:01:dc:b3:8c:0a:67:92:20:86:b3:ce:73:30:83:a6:b7:
79:16:9a:36:eb:92:e1:45:8f:c8:f0:b2:06:11:66:61:4e:26:
82:5a:0f:51:bf:e1:63:0f:83:77:a4:ae:55:d1:77:e0:dc:ec:
4f:7e:25:16:e2:40:01:30:f1:e9:4e:96:16:f0:aa:2b:14:f9:
d6:93:d9:c2:a3:2e:16:46:45:87:76:02:f7:d7:e9:77:a0:d5:
37:ea:0a:11:ab:90:7e:a2:ce:57:3a:15:04:9a:74:1f:17:b6:
9d:45:bf:c8:3b:58:b9:62:bf:62:e6:8f:15:ee:84:32:d7:71:
96:c5:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:08:20 2024 by rpki-client on console-fra.rpki-client.org