Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.cer (raw, json)
Hash identifier: d0R3ZLNhYwHlny0tqw7sp6DrV728JiiEL8EJrZAz+to=
Subject key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019079EA2186B7E18E0ACA82D8C204D8DB21
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jul 2024 18:45:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214587
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:ea:21:86:b7:e1:8e:0a:ca:82:d8:c2:04:d8:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 3 18:45:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:4d:a5:4c:f8:a3:7a:e0:2b:b2:b7:92:70:
75:c7:af:38:90:e8:11:8e:ad:8b:ee:a8:3a:76:0e:
04:8c:87:f1:0f:1d:7f:7f:ac:e8:97:1f:39:eb:de:
e6:8c:d6:fa:ed:9f:dc:e5:56:3a:ad:01:f0:a3:0a:
37:f9:17:55:49:f1:aa:3d:e7:52:2a:18:cf:04:62:
ff:c3:31:70:c3:98:39:46:c8:bf:11:02:f7:05:24:
4a:60:b1:f0:f6:c2:d7:0d:b4:01:b3:91:f9:12:b1:
5e:30:ad:1b:5d:54:be:49:ce:cd:05:d4:e1:ce:41:
f8:3c:da:48:36:9f:15:0f:6e:14:9e:da:87:a0:ed:
df:48:53:09:e7:7e:4c:11:f0:62:45:b6:e4:95:93:
c1:56:cc:b3:56:e9:4a:b1:80:26:90:ba:7c:7d:4c:
7a:26:15:2f:69:a1:e0:f8:61:39:ed:6f:f3:51:34:
e2:b9:fd:e1:16:e7:8c:13:9d:dc:50:f5:54:71:d7:
38:75:7d:08:fa:8a:19:4c:b6:a2:ba:28:8a:4d:55:
4d:56:9e:f4:d1:13:93:31:1a:76:c0:d3:7d:bd:ee:
a5:03:5b:4d:87:ab:71:f4:d9:4e:00:d5:3e:0b:77:
ad:11:f5:04:0a:fe:71:64:ec:aa:34:ed:ac:d1:cc:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214587
Signature Algorithm: sha256WithRSAEncryption
92:75:cc:5f:0d:ac:19:16:ec:24:da:02:87:99:c4:de:5c:10:
2f:82:d2:4d:ca:7b:e6:bf:3e:e3:51:cd:ce:37:3a:31:cb:2b:
71:38:02:2c:f9:a0:07:0b:ea:83:ce:02:85:9b:b4:e4:cd:2c:
66:ff:42:32:aa:6a:d6:f2:98:90:01:89:76:68:30:77:83:6d:
a6:85:15:7a:b3:e1:e6:8b:71:25:e8:25:74:8b:a5:7f:6b:e2:
6b:84:d7:d8:0a:ec:07:df:45:a4:f1:71:7f:28:2b:6c:01:55:
78:f9:a8:ee:4d:71:b2:21:84:43:cb:5d:bc:5f:48:49:bb:0a:
c2:9b:5b:5d:46:e1:28:fd:8c:bc:74:8a:f4:64:63:51:48:1a:
c9:c7:35:b9:df:7f:c8:67:11:ff:f7:21:72:fe:84:91:12:35:
b5:b5:3e:bb:61:9b:23:a5:18:6d:b9:ac:84:ce:5a:db:f9:87:
24:6e:34:15:52:a4:81:41:cc:03:3a:6f:38:83:ab:d4:9b:4e:
0d:49:5b:a9:ef:02:af:92:25:29:81:60:dc:6c:9d:9e:1d:29:
da:34:ed:8d:b3:17:84:3b:5f:38:94:95:9a:94:81:78:4a:03:
ee:15:30:3a:e9:ce:39:1e:9b:85:56:5c:11:54:4c:01:61:eb:
71:06:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:50 2024 by rpki-client on console-fra.rpki-client.org