Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/foz68AtoPEnYxse-WfhY6_BcjWQ.cer
File: foz68AtoPEnYxse-WfhY6_BcjWQ.cer (raw, json)
Hash identifier: pobCs1iIEjdtzJa48lKLrknhX6kJY5HU3coSDsrku70=
Subject key identifier: 7E:8C:FA:F0:0B:68:3C:49:D8:C6:C7:BE:59:F8:58:EB:F0:5C:8D:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B683A125D1EDA89986A616E2DB0996
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61224
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:83:a1:25:d1:ed:a8:99:86:a6:16:e2:db:09:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e8cfaf00b683c49d8c6c7be59f858ebf05c8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:49:fa:6d:49:cd:ec:69:4c:b7:d6:bb:64:
4b:3d:d2:00:ef:ec:9d:ac:6d:9a:75:ce:e0:3f:e5:
14:eb:fa:d7:01:36:57:b1:ec:37:99:08:8a:ed:9c:
76:be:13:dd:cc:07:77:16:d1:85:45:04:bc:59:08:
e1:f9:0c:31:cf:ab:23:6a:69:a1:63:38:31:4a:36:
25:ca:c2:9e:8d:b9:b1:49:fe:98:bb:3a:91:28:06:
b5:c3:65:01:c1:9b:a2:53:4d:b8:9d:02:6e:ae:b8:
01:a6:9a:79:51:9a:32:ca:cd:58:49:5e:1c:1f:52:
d5:a5:57:98:ac:a3:2e:b6:c3:52:e0:eb:49:9b:4a:
b0:4a:39:e0:d6:36:5b:24:1a:bd:4d:46:80:30:e1:
86:1e:c2:e4:87:84:90:b3:75:20:36:8b:be:21:17:
8b:74:45:f3:b8:48:80:0c:55:ce:66:a1:b9:66:06:
18:a4:3f:cd:74:5c:55:84:c2:25:e8:7f:6e:2b:77:
7b:87:26:e0:ca:1c:fb:f0:bf:e4:7e:d6:16:fa:cc:
fb:01:a0:18:f6:34:f4:b4:89:c1:b2:be:c0:90:4a:
4e:f1:10:29:34:7c:79:b3:8a:76:bb:50:c4:79:37:
90:20:5b:85:e1:88:0d:ac:c8:70:43:d6:c5:07:c4:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:FA:F0:0B:68:3C:49:D8:C6:C7:BE:59:F8:58:EB:F0:5C:8D:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61224
Signature Algorithm: sha256WithRSAEncryption
16:dd:0b:05:a4:3f:65:c9:96:62:54:0a:a4:ed:3c:4a:2a:b6:
0e:fc:80:d1:a8:a5:7b:cb:7b:4d:1c:02:1c:27:be:e8:9b:69:
87:71:9d:74:c8:08:5f:a1:5b:90:57:62:e7:1c:33:ee:dc:a3:
6d:d3:be:42:23:ba:42:3f:62:b1:18:d5:22:49:58:83:6d:9f:
c2:0c:4a:cf:14:78:f7:c7:71:ee:3e:68:80:c8:40:25:54:da:
c4:75:e9:12:cb:32:ce:e6:ef:d5:af:31:e2:3e:be:06:4d:a9:
a4:61:aa:ec:97:1e:53:7f:30:cd:d1:3e:83:46:e4:c4:35:27:
25:74:07:53:23:e0:93:28:29:fe:a8:f2:a3:b5:c2:f1:79:60:
0c:59:42:eb:85:d6:e3:00:01:ea:84:c6:0b:22:45:4e:0e:72:
f1:4c:1a:78:44:3e:03:a3:bc:b1:b0:6d:80:02:1c:2f:27:79:
a8:ac:bb:ce:a1:c2:a7:cc:4d:6f:25:fd:06:f3:d0:49:f1:d0:
7c:0e:96:ef:dd:93:0c:1b:59:cf:3c:2e:86:03:b7:77:82:90:
66:a7:e6:aa:a4:bc:95:a4:aa:5e:5a:12:d6:cd:1f:f0:5c:e0:
37:85:43:b0:b3:f9:dc:4e:55:5e:0b:6c:03:e7:f7:d2:d5:e9:
69:1c:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:09:00 2024 by rpki-client on console-ams.rpki-client.org