Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gMGC8Jzf20wXzTGwpYkaidYTx_w.cer
File: gMGC8Jzf20wXzTGwpYkaidYTx_w.cer (raw, json)
Hash identifier: E5V8aD758cRrMx30NLJu/NvDBW5quSZ68TRsaMTliHM=
Subject key identifier: 80:C1:82:F0:9C:DF:DB:4C:17:CD:31:B0:A5:89:1A:89:D6:13:C7:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4246C591D2D4BF477D5F0337D6DB46A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197691
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6c:59:1d:2d:4b:f4:77:d5:f0:33:7d:6d:b4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80c182f09cdfdb4c17cd31b0a5891a89d613c7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:1d:54:3c:61:62:2f:4a:85:d2:b9:96:fa:
76:01:c4:97:97:45:df:29:a4:7d:aa:15:c3:8f:be:
36:80:85:cb:54:cb:c6:c0:49:32:ab:d8:71:70:d0:
93:6d:4f:8e:a3:3d:af:11:a1:68:be:4e:1c:76:e5:
f1:91:b4:df:10:90:32:da:5e:33:13:11:8d:3c:b2:
10:7d:96:84:0d:c0:20:37:97:ea:3a:67:2d:da:f2:
2c:f6:da:5b:05:eb:d9:fb:2f:22:03:1a:19:71:e7:
0a:ab:fa:7e:c7:e3:94:d8:7d:1f:55:c0:a7:82:af:
86:5e:cd:6c:b9:28:72:c7:21:9a:4e:89:d7:a9:40:
82:54:a8:9f:fb:5f:c4:8f:1c:24:45:0a:61:44:d5:
f8:9a:7c:fa:8a:9c:54:4b:f0:40:05:73:6f:7c:af:
ec:36:9e:a2:eb:f7:ae:b8:dc:67:6f:36:38:ae:66:
e1:61:54:7f:3e:ee:0b:b3:f8:56:8b:96:c4:69:45:
47:83:71:fe:60:75:72:0f:f5:3a:91:7f:99:71:b9:
98:62:9f:ae:e4:0c:a1:f2:a9:81:7d:41:39:e1:da:
f2:d8:a2:8d:ad:bb:de:38:ed:a8:c7:a3:ec:6f:77:
ff:51:f7:e7:58:61:5d:bb:4d:7f:b7:a9:06:83:e1:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:82:F0:9C:DF:DB:4C:17:CD:31:B0:A5:89:1A:89:D6:13:C7:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/10f9db-a79a-4365-becb-4fe844719249/1/gMGC8Jzf20wXzTGwpYkaidYTx_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197691
Signature Algorithm: sha256WithRSAEncryption
7c:9d:33:45:e4:38:69:52:da:60:30:b9:21:3e:a9:60:cd:b9:
0a:f0:cd:26:55:59:00:71:85:2b:a6:e3:0e:06:3a:93:19:43:
a5:d2:cf:67:17:6d:ff:7e:a4:ca:70:15:ff:2f:1e:19:e6:5a:
d7:05:fd:ea:62:8e:38:2f:7d:14:04:a2:8a:11:c1:5e:01:23:
2c:76:75:77:bf:63:c1:88:71:1b:8b:b8:b7:5b:b3:9e:0b:de:
45:8b:45:14:98:65:2b:a0:6f:89:d0:44:58:18:e0:cb:94:55:
f0:4f:52:f1:47:fa:f3:db:72:ea:c6:c0:ee:55:7d:15:3b:80:
5a:23:e3:da:10:77:b4:a7:2e:84:bb:a7:96:62:38:5c:b9:45:
2e:64:ee:ae:40:f9:49:c1:53:02:d8:9f:37:66:47:29:6b:72:
da:f1:9c:83:bd:5c:37:6d:8b:2e:f5:01:6a:c0:ca:b0:59:7a:
70:77:0d:4c:cb:93:33:14:93:89:a6:0f:51:d7:60:14:19:f6:
4a:05:16:bf:3c:94:9c:58:17:58:b9:fe:d0:be:8c:ec:e5:91:
e7:76:61:54:57:a6:6b:d1:89:93:85:6f:92:0f:aa:09:d6:6a:
79:ba:fa:2e:ac:9a:73:75:f8:dc:9a:40:22:47:ef:4e:6c:3e:
a1:a2:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:31:55 2024 by rpki-client on console-ams.rpki-client.org