Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
File: ggA1PrKBit3XElx4FCFDMUneb2I.cer (raw, json)
Hash identifier: JqFNAguVKyjFrHkyUK5IJzKB9AQp34FU3leceILYlnU=
Subject key identifier: 82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DBD8917D55E54C6FA85B224EE3A21FFA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 18 Feb 2024 18:44:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215491
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bd:89:17:d5:5e:54:c6:fa:85:b2:24:ee:3a:21:ff:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 18:44:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8200353eb2818addd7125c781421433149de6f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:d2:06:ec:f9:e6:d8:f7:7f:71:8d:32:c7:
62:25:40:42:72:27:89:34:51:a7:fe:d6:49:d4:8f:
60:87:96:4a:f8:43:65:85:86:56:8e:10:de:17:b6:
f9:51:f4:99:34:0c:5e:3b:64:e8:26:7e:a0:c7:f6:
53:0b:39:e4:d8:e2:9f:85:c3:e9:f2:e8:f6:c9:d1:
89:d2:ac:c2:0b:dc:72:f6:34:7a:69:2a:83:56:8a:
9b:85:8a:e1:ff:f3:b6:03:59:32:d9:2c:66:26:75:
63:e4:c3:83:4d:d8:20:32:66:09:c8:ec:6b:84:22:
1b:e6:e4:4c:4f:6f:54:9c:f7:b7:e3:ed:9f:00:5b:
6e:07:92:03:47:e2:d4:6c:63:2e:8f:5d:60:36:d2:
e6:1a:18:8b:8f:0f:be:a3:69:4c:e0:4e:a3:ae:21:
2f:5e:1b:5b:ba:0a:88:e9:02:df:f2:a1:39:11:1a:
f0:2d:9d:b9:c4:e7:a0:e0:7a:2c:18:c7:95:bb:0f:
a8:13:30:4f:65:c1:3b:d0:61:c4:e4:df:0d:0f:2d:
d5:2a:d8:f4:67:cf:e6:e3:e0:51:81:a4:cd:ff:0f:
44:22:9f:9d:83:a6:ed:aa:72:6a:b2:dc:3f:03:f1:
e8:80:96:a1:94:c8:14:f8:95:21:a3:de:22:e0:40:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215491
Signature Algorithm: sha256WithRSAEncryption
45:01:ab:48:0c:0d:c8:fd:df:b9:13:08:94:2c:f5:ea:a8:87:
e6:23:5c:ea:4c:22:e0:3a:36:ab:05:c3:38:eb:34:68:65:29:
14:98:0a:d4:d1:f2:a5:0a:41:57:89:89:ec:3a:66:82:16:f2:
21:59:c5:5b:e0:98:23:98:b4:a0:6b:97:ea:6b:52:a0:17:70:
3c:f3:38:b9:58:0b:d0:c6:d1:10:92:77:ef:90:f4:81:79:c5:
e6:5c:56:16:32:94:2e:79:a9:65:f2:5e:8a:1a:ab:21:e2:68:
8f:5f:6a:43:d0:cb:6e:5c:0c:3e:ca:c7:56:94:40:f3:e5:55:
1b:87:c3:05:bc:c4:56:46:89:3f:0d:ab:8f:9a:37:1f:9d:15:
17:f9:66:72:3b:5b:37:7c:7a:ce:18:4b:b6:9a:9b:7c:3b:97:
71:d9:01:04:4b:89:3d:b2:62:69:a1:da:8e:1d:66:d2:93:01:
90:c1:c4:9d:cb:09:62:a1:9a:d3:5f:37:a9:cd:cf:34:56:9b:
63:31:19:12:1b:27:a9:05:fb:94:e7:fd:b9:4e:d6:05:0b:25:
97:c9:a9:e8:08:81:17:ad:1d:b3:83:8e:9c:76:2c:23:b9:fa:
94:16:07:db:29:b2:29:e7:1d:0b:19:7c:a3:47:d3:6d:a4:a4:
2a:3d:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:57:32 2024 by rpki-client on console-ams.rpki-client.org