Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer
File: eJwCNiZh7UHo-Xohsan6yuU96P4.cer (raw, json)
Hash identifier: 7WoFHnn4rJBa7LahJJpWku5tBB6UUcDpV94+lLvQG7M=
Subject key identifier: 78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019198BDEB71AA11157BD67136DB83A7A6F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Aug 2024 11:27:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214290
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:bd:eb:71:aa:11:15:7b:d6:71:36:db:83:a7:a6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 11:27:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=789c02362661ed41e8f97a21b1a9facae53de8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:63:7d:ff:fb:51:a2:f6:f7:09:3f:85:33:
ff:46:54:2e:a4:9c:6e:81:bd:7a:fe:8c:5b:76:2e:
75:c7:fb:7a:83:e4:e7:5c:e8:79:59:49:c0:c0:4d:
de:ff:af:a5:59:e9:32:2a:44:31:8f:7a:d9:de:44:
2d:db:c7:8a:16:d7:68:1f:d6:dc:87:de:b4:c9:66:
32:a1:d0:49:f1:cd:ac:0b:32:ae:69:b7:10:67:7d:
b7:87:3d:d3:9f:22:4b:a5:75:1e:d5:b2:b3:b7:7a:
c4:48:7f:1d:f0:e5:2b:30:6c:ef:5d:9e:ba:fe:71:
2d:ac:b1:fa:ae:a7:67:73:e0:c3:30:5c:a2:88:c5:
31:c2:83:b2:90:56:50:5d:52:b8:4e:ce:04:71:02:
e1:3b:db:66:81:32:8e:50:4a:8a:24:1e:8b:c9:5e:
2d:4b:1a:ae:dd:ea:94:b3:dd:93:e6:35:91:5f:70:
b4:34:fc:8b:a3:15:f4:c5:06:06:1d:8f:ce:43:d6:
59:2e:5a:dd:c6:f2:7b:00:45:98:75:74:88:95:2a:
1d:ab:5a:e5:bc:70:1d:aa:a5:ba:d2:da:81:0d:af:
55:15:a9:20:8c:83:06:13:0b:ef:4e:29:5c:b5:33:
81:11:4f:32:91:02:f2:01:2f:6c:6c:e7:5e:66:45:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214290
Signature Algorithm: sha256WithRSAEncryption
65:1f:3b:e5:70:d9:7f:f4:b8:12:37:0d:7b:e0:26:6f:66:32:
c8:b6:76:f3:f0:bc:d4:74:a3:d6:88:c6:b2:cb:39:98:fa:db:
0a:0c:95:13:3a:ae:d2:ff:0a:1c:1f:f6:bc:89:f1:0b:db:cb:
ac:73:11:37:06:ed:53:6d:35:89:15:d0:6e:4c:74:54:f4:f8:
86:e8:d4:8c:59:ad:f0:16:a2:85:6e:b5:ec:7c:8c:81:ea:d6:
e9:f1:f2:1f:c1:7a:88:28:92:aa:80:8f:38:59:e4:e9:8c:57:
69:ad:67:38:48:a7:60:d9:9c:ed:76:6a:a2:05:be:70:de:c5:
17:c6:c2:06:a4:c1:1e:37:e2:3b:ec:d7:0a:c6:58:f0:5c:91:
a7:68:55:75:13:63:1a:3a:9c:72:bb:80:68:c2:d8:50:6a:53:
52:c7:12:cd:c0:80:72:3b:e7:ad:72:4f:a9:7d:87:bc:55:da:
b0:b9:eb:78:ea:24:ef:ce:ed:5a:f1:b1:9a:b8:47:c3:c5:58:
be:9a:69:e1:be:52:d1:00:7d:78:5a:a1:9e:ed:cf:29:5a:ee:
e2:86:26:5b:1b:1d:81:0d:c7:6d:14:85:b5:0a:25:d8:dc:95:
e5:7d:df:73:55:4c:b5:25:ca:33:32:aa:93:2b:c9:22:64:4e:
40:de:4a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:58 2024 by rpki-client on console-ams.rpki-client.org