Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
File: griIeR5H8Xu-ofUbnJdpd2JPBBw.cer (raw, json)
Hash identifier: n5lUtzWJNuga1WEe3lKGDCX/7sVUR5bUl0MthuPk+RE=
Subject key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DB0AF3902722E39D6170264291EFF7E99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 16 Feb 2024 06:51:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199406
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b0:af:39:02:72:2e:39:d6:17:02:64:29:1e:ff:7e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 16 06:51:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82b888791e47f17bbea1f51b9c976977624f041c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e0:f9:04:d5:af:8e:2a:04:fd:69:76:5c:2b:
25:37:5e:98:65:da:96:02:ad:d7:6d:85:ab:f9:ba:
7c:c7:d3:79:df:4a:c0:a5:16:ee:4e:21:d8:44:05:
50:ad:fe:50:90:8d:0e:0e:df:00:71:e4:d5:28:8f:
c8:7f:d1:83:99:7b:23:71:77:10:6f:cf:17:bd:2a:
9f:2b:8e:04:4c:04:85:4a:9c:3d:8b:9e:a7:34:f5:
25:6b:7b:71:bb:ea:d3:70:8b:03:26:4b:42:a9:fc:
6e:0c:bd:b7:07:48:d6:14:78:b8:86:7b:7a:11:a9:
44:99:be:37:e3:32:8f:20:33:d1:22:92:f0:03:16:
8d:f3:63:23:5b:12:f4:7e:a2:d3:fe:45:d5:1d:03:
f4:09:ea:b9:71:d1:47:0f:c7:7b:e2:15:28:44:34:
79:3e:73:21:47:95:30:71:62:23:e0:9d:2d:30:e1:
c8:b0:d8:63:4d:30:40:8f:36:b9:b5:d7:2d:c1:42:
2a:c5:a0:62:9a:8a:78:09:89:37:0a:fc:f6:d6:01:
28:7a:aa:cc:b8:03:fa:21:f0:f6:3c:7f:37:6d:2f:
d6:97:01:eb:2b:59:55:35:56:e4:7d:28:e1:ee:70:
bf:69:9f:ad:70:da:21:2c:9b:15:97:5c:c3:a9:63:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199406
Signature Algorithm: sha256WithRSAEncryption
4a:28:c5:29:b8:c9:32:f7:fd:e5:2a:fe:97:80:ea:f3:4b:5e:
87:3c:02:73:88:2b:e6:25:30:0d:58:2b:36:bc:e3:6d:71:3e:
44:1d:70:24:7c:85:5a:fc:09:d5:81:ee:26:ba:e7:c0:5d:e5:
a6:fa:ce:2c:f9:c6:80:b5:39:1a:4a:2b:7f:7d:78:7d:4f:b4:
6a:d0:65:c1:cc:5f:e2:87:7e:d3:f8:51:0f:c9:48:4d:26:02:
57:52:1b:20:38:b4:c8:40:e1:85:ef:e1:2e:c5:04:31:f3:04:
84:02:1a:6c:15:94:91:65:e5:20:cf:d5:ff:e3:15:44:e9:07:
d6:0f:98:49:25:e8:8f:78:46:48:6f:ed:bd:f5:77:c8:22:9d:
92:b1:e3:60:28:df:54:ec:f4:37:7b:f8:7b:a9:d6:9b:62:05:
48:6e:d3:13:8e:dd:04:86:12:ad:04:c9:36:f8:f8:24:6a:3f:
c3:f9:7e:61:6e:fc:b6:80:ee:98:36:2d:95:cf:1a:b4:56:e3:
e2:ac:58:d0:4d:99:f1:ce:fe:20:9f:33:86:aa:20:dc:6c:e7:
b7:6c:f6:f6:3e:95:5d:2b:07:86:7e:37:30:5b:e8:ea:e7:36:
08:9c:e3:04:5c:7e:87:37:00:67:48:02:05:aa:b4:6e:39:99:
e5:81:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:57:39 2024 by rpki-client on console-ams.rpki-client.org