Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer (raw, json)
Hash identifier: R+MDLnObOVt+e9G2tGRv5s2Q7rqj7xQk+fLadiDOWSY=
Subject key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99DF5A771DEEDD494FB4EC29A2F452
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201247
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:df:5a:77:1d:ee:dd:49:4f:b4:ec:29:a2:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:27:c1:10:35:98:d0:44:36:ca:9d:15:31:
4f:e3:17:2d:83:5f:0e:c2:b5:5c:e8:18:19:6b:b0:
be:51:94:ed:a0:03:59:fe:2e:25:cd:ac:40:2d:dc:
7e:52:0e:eb:d2:d2:5e:02:2c:c1:9a:0d:ab:b1:67:
ac:fa:51:4a:2e:87:39:4f:eb:15:92:f1:6e:57:23:
c2:02:20:41:1d:93:99:15:e8:aa:b1:c5:fe:58:4e:
df:f2:ea:a8:5d:3c:a1:21:03:1d:8e:41:e5:97:05:
5a:c1:8f:38:5e:24:cc:f0:96:2e:53:a1:f5:4e:83:
08:7f:db:b2:74:83:5b:c9:c4:9f:fc:b7:cb:f0:a3:
dd:89:e9:fb:20:38:c8:c5:e4:e7:8a:05:48:3d:5a:
9e:47:66:de:56:7c:19:60:9a:ea:dd:44:93:bb:cd:
4e:89:be:36:d2:2f:56:d7:05:32:a6:70:fb:99:ba:
14:31:c6:88:f5:09:e2:69:85:b3:b4:da:a8:1f:f6:
41:fb:27:45:7d:92:65:b7:7f:32:04:cc:eb:fb:ce:
8f:6d:cb:8c:ad:28:b0:04:91:b4:d9:aa:80:2d:40:
e8:40:5b:a1:13:02:d2:71:5e:d9:db:d6:ea:ca:db:
c4:0f:c0:41:76:53:6d:40:29:fe:cb:fe:04:9f:d5:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201247
Signature Algorithm: sha256WithRSAEncryption
a0:30:97:a2:67:f1:b4:db:89:ca:75:ec:6d:54:69:d5:3b:ba:
a0:5e:fd:b0:95:6c:40:e3:ff:09:18:8c:a6:a5:bf:c9:3b:91:
49:a8:a0:cc:c2:f5:3b:86:69:26:f7:7a:c1:f9:77:44:e9:be:
34:1d:ba:c7:2a:4e:64:2d:f7:35:01:8f:32:2a:c9:0d:00:17:
b8:a6:cf:9e:5e:28:5b:0d:cc:8b:0c:34:d0:2a:a6:29:0f:49:
41:62:24:39:fb:30:11:82:6f:86:c5:24:f5:a9:c3:70:2c:30:
9b:93:27:bb:44:63:ac:eb:3d:47:6f:50:19:e1:e0:f4:55:dd:
cc:b7:23:a1:ff:f5:68:97:31:2e:5b:de:c6:b6:f3:d8:ab:01:
86:24:47:91:93:29:a3:0c:9a:32:f5:ae:f7:50:4a:bc:55:fb:
b3:bd:2f:de:7a:5c:55:cf:06:0d:58:7b:9b:af:da:92:3b:82:
ee:78:f5:f3:42:cd:30:99:cd:8e:d2:47:e7:b5:30:2d:bf:bc:
6b:a2:c8:57:ac:e5:20:11:9b:86:bd:92:09:ca:ca:ee:b4:cc:
4c:7f:4e:ce:9a:67:2f:eb:71:b9:8e:00:c9:66:f5:46:38:1c:
fd:44:02:66:f8:18:82:18:fe:f6:08:b6:46:32:ad:90:37:f7:
0b:7d:35:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:24:44 2024 by rpki-client on console-ams.rpki-client.org