Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
File: hTq7t9e8xKXFbpEu76wbC7BFUCE.cer (raw, json)
Hash identifier: 6W9BnDmWmivtkgFPNsbFLJZbrzzWFOmaQzNlHN5bjXg=
Subject key identifier: 85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0FFA228AA7F941D3DBA8794463C5EB7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 18:57:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215374
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:fa:22:8a:a7:f9:41:d3:db:a8:79:44:63:c5:eb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 18:57:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:12:20:9b:cc:c5:89:db:53:41:6a:48:15:
d8:c6:23:d3:e6:91:4e:42:bf:ab:53:a9:00:45:70:
57:f7:a6:ce:83:b7:be:7b:14:af:55:7c:4e:15:4d:
80:58:c2:65:e7:2f:c8:33:33:f1:b7:83:fa:55:4c:
e1:c2:91:77:b7:6a:53:62:57:7b:b5:03:eb:b1:05:
5a:19:62:20:19:04:16:f4:b7:86:b6:8b:f4:68:be:
d6:39:b8:a6:14:11:ff:c0:30:05:bc:a5:57:62:d7:
3b:f9:88:3c:e7:c5:b1:12:d7:1e:59:c6:90:d4:59:
bc:77:e1:b6:f0:c1:ff:31:2c:3e:25:ae:be:ec:39:
ed:c8:bf:86:7c:6f:3f:09:ee:11:20:97:ac:06:4a:
82:4e:ee:f8:aa:29:c4:f8:2e:b1:71:9f:21:21:2b:
de:08:a5:24:69:9f:30:34:95:0f:ba:63:e9:55:76:
44:00:68:a5:48:5f:97:b1:42:f1:3d:fb:1f:50:2a:
82:db:f0:67:1f:56:ec:a4:d5:d6:39:b6:df:b7:73:
c9:37:b0:86:57:76:b2:c9:84:c9:d3:b5:3a:10:15:
74:7a:9e:56:b6:52:9e:a6:ad:25:d0:e7:7c:71:1d:
83:e1:35:8e:6e:21:da:dc:57:a0:0a:df:a8:fd:21:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215374
Signature Algorithm: sha256WithRSAEncryption
ae:9c:93:91:54:02:59:8d:9d:64:04:1c:bd:6d:87:ac:0b:56:
bc:57:c8:9b:9a:87:59:a6:b4:18:9f:81:ee:fe:c8:8c:42:9d:
65:c3:31:4d:73:4c:eb:34:b7:e6:22:24:b8:54:74:d0:eb:6b:
13:63:95:ff:2e:29:48:89:62:eb:e4:57:93:3d:3f:61:18:8d:
ed:9e:b9:e9:0b:87:a5:82:b0:c3:91:49:bf:7f:2d:da:92:13:
fb:8b:32:f5:ee:32:ff:ce:45:0f:1e:9a:d5:72:cc:f6:b5:b3:
6b:e1:74:3a:3f:71:d1:22:a3:8f:04:5e:b5:15:78:e7:a7:e0:
c7:c0:89:40:08:be:56:e0:b7:d0:b8:c0:bc:7e:95:2f:8b:8a:
db:8d:4f:d8:4c:85:47:09:d4:a2:54:2c:5b:8c:57:a8:9f:3c:
59:38:c2:12:ff:6b:58:b9:b4:29:71:8e:63:ef:87:5a:05:ee:
8e:42:c8:c8:d0:2f:f3:d2:2b:55:8c:cb:d3:03:7d:32:75:cf:
85:cc:13:2d:16:3e:04:82:3d:41:54:2f:89:04:ba:50:66:73:
30:c0:aa:8d:44:77:a3:18:52:1f:3c:6c:ac:71:77:6d:37:eb:
38:3c:f6:05:75:37:0c:68:87:fe:17:26:78:0f:15:25:37:20:
e2:e5:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:09:58 2024 by rpki-client on console-ams.rpki-client.org