Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.cer (raw, json)
Hash identifier: QiHZmxvV25yiDvohsQmCwOsU2Ou6KK5ZFPX4qLKjWA4=
Subject key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492CFB78A5DD6D55104027EF0B2B2F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198202
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:cf:b7:8a:5d:d6:d5:51:04:02:7e:f0:b2:b2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:db:0f:9c:ba:f3:62:87:42:5c:27:b7:38:
d6:51:a0:c5:10:3f:5c:65:7d:76:e9:70:01:ce:61:
99:72:85:6a:ae:23:6a:97:ab:30:da:d1:ba:d7:61:
37:c3:ad:98:94:3b:64:38:ba:2e:1d:39:83:5d:7f:
9b:4a:02:51:22:a6:2d:16:ad:73:ec:75:43:0a:db:
14:ff:0a:b2:d4:e5:c2:d0:6e:33:89:e6:48:56:50:
52:dc:cf:ff:94:53:80:42:c3:ff:5b:02:43:14:e0:
5e:c0:07:21:c1:25:9a:cd:b1:86:49:a2:51:e4:d9:
f3:be:22:3c:aa:b3:f9:51:4c:0a:9a:d1:2e:ff:82:
58:9b:27:67:40:d1:b7:24:52:d1:e2:b5:2c:1e:11:
92:ae:d8:db:12:9b:73:c0:a5:fc:d5:56:1d:27:82:
c3:61:4b:d5:da:d9:4e:da:22:cd:db:06:97:b1:37:
11:48:a8:65:c1:2e:b3:e1:66:43:75:ff:1c:2a:3a:
59:9f:b7:90:18:83:7f:95:04:45:fc:4f:e9:24:ef:
3d:2a:01:27:d2:17:bc:05:5a:d9:95:77:e6:65:bc:
23:01:e4:d6:9a:8b:cf:49:8b:c2:36:e2:a6:68:09:
d5:ca:0e:28:8d:42:a8:2c:26:4d:4e:bd:1a:7d:29:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198202
Signature Algorithm: sha256WithRSAEncryption
11:7d:30:1e:72:55:d9:85:8a:16:09:eb:d9:93:23:a4:3d:70:
01:bd:5d:a9:cb:bb:1b:ba:aa:c8:8a:e4:07:28:fa:02:4f:d9:
ee:b8:e3:8d:39:54:94:4e:80:36:40:5f:15:e5:46:24:97:cc:
49:a1:56:13:8c:65:04:ea:05:69:79:f6:4c:42:7a:6b:a5:95:
4f:be:1e:d8:9f:f6:30:77:7d:e3:87:e5:22:d4:d5:8b:63:12:
25:84:92:65:11:98:00:7a:65:53:68:a4:52:39:55:dd:1b:a4:
d7:0f:ed:0a:d6:5a:a6:a8:eb:8a:02:2a:9f:98:55:2d:eb:92:
dc:95:1d:42:5a:31:53:2c:2e:5d:f9:82:8b:ae:14:f4:da:06:
70:65:e9:ea:49:95:fb:08:af:5c:39:d3:fe:b8:e3:05:07:27:
00:22:9e:74:eb:9c:4f:d0:67:9a:a1:b7:18:91:98:f7:46:9d:
39:04:bb:64:6a:34:9d:b9:8a:cf:7f:44:a1:e4:36:66:26:5a:
8d:70:a0:1a:2e:93:a6:7f:fe:04:4b:fc:33:64:5a:a1:ee:a3:
6c:e4:f7:8c:36:6a:7d:12:b0:8f:de:c4:57:5f:7e:b6:fa:f7:
c1:e1:93:a4:6a:57:82:35:a7:16:86:84:bb:54:24:6f:1b:3f:
c9:fb:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:50:53 2024 by rpki-client on console-fra.rpki-client.org