Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
File: f35evW-kacXjcL_BBsTUqtHh25Q.cer (raw, json)
Hash identifier: 1kLLj6QCaQg4JZghIaYB3bJ4qVC5XHEmLbmx01LzKcY=
Subject key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5001AB34AAB57DC627901B06690FD9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206843
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1a:b3:4a:ab:57:dc:62:79:01:b0:66:90:fd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:ad:15:df:bc:d1:12:35:13:6b:29:40:4b:
f6:36:09:e4:ed:ea:43:51:84:ce:c2:07:9e:d0:18:
77:35:59:0b:40:b5:b3:2a:cd:04:c3:c7:d6:37:8d:
13:b8:7b:7f:29:07:19:ec:7e:65:9e:03:15:c2:7f:
e7:84:dc:27:17:7f:ac:cd:eb:cb:04:d0:c4:4d:fa:
9a:72:93:e2:7e:59:c2:7a:dc:18:d7:7a:f2:89:43:
48:00:cb:41:5e:14:e8:83:79:1d:97:8f:7b:c9:c7:
65:cb:72:14:f8:f8:91:2b:65:b7:1e:e6:88:9f:a0:
4a:f6:67:e1:95:e1:df:5e:85:9b:82:75:07:2d:3c:
ce:6e:a2:cd:84:cb:97:59:dd:04:53:8d:4f:a7:66:
9a:55:ac:1e:d0:e4:fd:6c:0a:36:9e:9d:fb:69:ff:
9b:e2:bf:67:8a:e2:15:46:d3:35:fb:50:2d:23:b9:
96:06:67:45:8b:8e:ca:b8:81:83:ab:8a:cf:79:cc:
b2:df:57:da:ab:4a:04:81:8b:7e:0c:6a:36:e7:56:
58:d0:e7:2f:81:cf:9a:00:c8:f8:fc:be:de:eb:18:
4b:ea:80:23:61:2b:ef:0d:b9:5f:38:bc:63:0d:bd:
94:ea:62:f2:be:7c:31:93:a6:e5:0d:25:33:6a:88:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206843
Signature Algorithm: sha256WithRSAEncryption
30:a7:3c:1d:b6:0c:7a:26:66:e0:d1:29:45:bf:b9:f1:b5:ba:
cf:79:b7:7e:f8:7f:39:b7:20:01:3c:f8:cb:34:1b:72:24:7a:
1e:c3:7b:35:d5:9a:ea:4d:ea:22:57:08:85:3b:ae:e5:59:c1:
2a:59:6f:ee:6b:fa:de:fe:53:3e:c1:39:01:3a:b0:6e:5e:aa:
c3:ff:a5:e0:ac:c0:83:9a:b7:4f:9b:f7:c7:21:81:a6:3f:b7:
10:12:47:90:d9:c2:4a:e5:4a:c6:cb:81:d3:ed:e7:d3:22:bd:
08:1c:a0:91:81:59:4b:44:03:05:ce:70:c8:e7:d1:0f:b7:65:
f2:0b:76:13:9e:5a:b9:ce:4c:c6:4f:a0:68:97:82:51:5c:f0:
4c:57:9b:1f:e2:e6:f3:76:35:a7:55:79:c2:c8:8c:33:88:08:
12:06:b4:c3:49:8f:8d:d9:a2:69:23:9f:17:4c:df:19:57:85:
55:48:f7:64:db:63:33:a5:1b:0b:ea:e9:6c:57:16:dc:c9:f5:
9f:01:d5:ab:d0:91:3b:3d:7e:cc:d4:66:28:a8:ee:bb:67:52:
d8:d0:5d:fa:dd:5f:3b:78:25:ad:df:e5:20:2c:51:6d:c3:a9:
44:d6:5f:df:62:8f:fa:60:e3:1e:c8:df:70:55:4f:49:00:19:
d5:96:db:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:47:29 2024 by rpki-client on console-fra.rpki-client.org