Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fkjfjrkRmEdcx7Hmci0qsSXhZns.cer
File: fkjfjrkRmEdcx7Hmci0qsSXhZns.cer (raw, json)
Hash identifier: xeQB5G0eQmRBwtzhe8frdj0DptsMwWOuaqARatF3eHk=
Subject key identifier: 7E:48:DF:8E:B9:11:98:47:5C:C7:B1:E6:72:2D:2A:B1:25:E1:66:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7935CD57618FFFA78E8CF4843955A79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212525
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:5c:d5:76:18:ff:fa:78:e8:cf:48:43:95:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e48df8eb91198475cc7b1e6722d2ab125e1667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:6a:8e:1a:4c:99:2a:ac:61:95:48:ef:34:
82:7c:3c:bf:f8:1c:5b:a5:08:8c:8e:35:cc:1a:46:
d8:73:17:22:d0:de:f4:74:f7:68:c1:49:bb:07:c7:
30:6d:d8:1b:bc:c4:5e:9e:c0:56:dc:b8:14:74:94:
66:ae:5d:b5:ee:0d:19:2b:e5:fd:1f:7f:f5:03:61:
9d:07:77:4a:7e:6d:31:d6:c9:17:97:3a:74:37:f2:
50:52:96:e1:49:0b:f8:bd:2b:6d:4f:92:eb:39:f1:
c1:7d:5c:e2:a3:0d:e8:6a:5e:07:d6:89:9c:c2:9f:
31:8d:e1:02:92:38:e3:89:c7:a2:56:70:0a:a7:4a:
b8:e5:b5:ae:6c:de:b6:88:21:3f:c2:71:0d:29:86:
a6:65:06:ef:1c:9d:ac:0e:76:47:13:a1:c4:8d:5f:
4d:1f:50:bc:60:69:42:d0:5c:5e:c8:d4:50:09:a4:
0a:8a:23:15:d9:9a:bd:ad:9c:ad:1a:67:47:b6:16:
91:55:a1:ca:3e:04:1b:de:db:63:5d:f1:aa:77:10:
19:44:6d:56:a0:03:45:25:65:ca:a8:3a:c4:41:bb:
3a:c4:38:95:45:d0:3b:d8:78:e5:2b:f1:b1:43:5f:
1e:a6:6d:cd:b4:6b:04:95:0e:21:ab:3b:2d:9a:04:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:DF:8E:B9:11:98:47:5C:C7:B1:E6:72:2D:2A:B1:25:E1:66:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212525
Signature Algorithm: sha256WithRSAEncryption
35:ee:64:4a:f9:d5:29:74:85:70:71:23:cd:3a:3f:4f:f2:e5:
2f:23:57:92:81:28:58:73:5a:1c:f0:6d:ad:24:85:c6:dd:f1:
ec:73:60:bc:38:59:36:be:ee:52:04:6a:b0:6f:93:52:4d:7c:
fe:e7:27:97:57:37:32:75:02:b1:f6:3a:5f:19:73:ec:22:51:
d4:e1:fe:0b:d9:d1:f6:4a:be:e5:40:50:d5:1c:84:28:54:c2:
84:29:e8:0e:57:bf:76:da:c7:f1:92:e1:d0:74:1b:86:31:8b:
cf:de:29:a8:d9:2b:92:73:f5:50:33:c0:32:b6:76:aa:d8:7a:
30:2f:e0:85:74:1e:2c:a0:0d:13:a2:f7:66:a0:64:ae:57:ae:
28:c8:d9:b3:f9:4b:86:cd:e5:26:19:b1:53:e0:9d:20:01:44:
3e:20:f8:ce:20:b9:3e:a6:d1:e5:95:f1:80:b7:cb:c9:b6:be:
35:e7:e0:d7:7a:96:5d:2a:1e:ab:cf:54:ec:ed:00:00:60:9d:
ce:e7:5e:77:b8:a9:9d:f1:94:fc:13:40:77:19:ef:06:07:f5:
fd:58:4f:5d:72:ed:d1:f4:f1:58:48:fb:9e:7f:1c:61:53:c8:
e2:88:56:b2:12:5f:c0:1c:4e:b5:75:4a:f2:29:f2:18:5e:f4:
96:60:0f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:52:54 2024 by rpki-client on console-fra.rpki-client.org