Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iJZl7w906-aauwkHzJRxxeE8B2o.cer
File: iJZl7w906-aauwkHzJRxxeE8B2o.cer (raw, json)
Hash identifier: RPkO4jGLa92FSLM42D4cKmIrr+xuEQVwaRqjGw/i8Yg=
Subject key identifier: 88:96:65:EF:0F:74:EB:E6:9A:BB:09:07:CC:94:71:C5:E1:3C:07:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01908E7BEA4E71384F72F05EBBDB2064A738
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 18:36:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203024
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8e:7b:ea:4e:71:38:4f:72:f0:5e:bb:db:20:64:a7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 18:36:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=889665ef0f74ebe69abb0907cc9471c5e13c076a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3c:29:08:c5:b4:2f:11:0d:5b:1f:e1:92:38:
56:9d:f4:ca:66:8b:81:55:9f:72:2f:66:b2:5e:78:
84:6a:5d:2e:6a:9a:bd:62:a6:99:46:4f:99:83:55:
01:a6:11:fa:ab:20:ea:c8:02:d0:e6:06:6a:e3:56:
e0:89:fb:c2:c0:a9:3d:40:dd:1a:a0:a5:10:ce:f4:
56:ed:73:4a:aa:43:3c:f5:1e:61:31:9a:0a:bf:f6:
a6:a6:dd:0b:14:de:11:d3:c1:25:5f:e1:1f:7d:17:
99:3e:85:9e:dd:d4:ea:2c:80:99:08:1c:f7:6c:76:
05:62:0a:22:58:97:ae:24:62:d8:33:4b:ad:6a:1a:
cc:fd:c5:8b:78:f7:cb:2c:1d:ad:3b:58:b1:64:f2:
a5:42:ca:66:a4:81:38:33:73:3c:5c:30:d5:79:e6:
eb:19:8d:ae:b1:58:3e:46:72:67:1b:95:0f:0c:c1:
42:e8:a3:1e:c4:dc:94:4f:06:29:d8:ca:df:bb:30:
46:b6:f8:95:62:9a:25:2b:3a:48:1c:94:6b:18:7d:
a5:be:7b:c6:3a:7c:ba:99:82:3b:15:bc:c2:94:1b:
25:48:23:cd:1f:5c:d6:65:c0:77:08:d6:f8:ac:bd:
59:4c:9e:2d:c2:4c:e8:b5:1f:1c:3d:7f:62:df:48:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:65:EF:0F:74:EB:E6:9A:BB:09:07:CC:94:71:C5:E1:3C:07:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203024
Signature Algorithm: sha256WithRSAEncryption
54:b3:00:bd:99:78:89:25:be:52:96:3f:30:9f:d4:e5:8c:f5:
4c:70:6c:09:3a:2a:63:43:21:52:a5:5d:dd:48:b4:55:8c:09:
42:ff:4f:de:ad:af:eb:69:51:28:81:a2:31:49:82:66:24:e9:
12:0f:58:fb:98:73:43:7c:fd:65:84:4c:97:f4:ad:17:f8:a0:
06:b8:14:70:e7:ba:c8:09:fa:84:7f:97:24:09:4c:05:f9:bf:
3a:ac:9e:01:a4:8b:da:6f:71:e7:ad:f2:1f:c7:18:79:92:5b:
4a:ce:73:06:ae:0e:08:1a:50:ac:d3:0d:ca:61:c3:06:1f:9b:
95:de:3a:a7:d0:b0:f6:1c:07:e7:d1:91:78:5a:9b:bf:73:7c:
0e:84:b9:c7:ef:e5:f4:1d:35:b3:aa:f4:de:59:17:fc:1b:59:
29:ad:a5:64:b0:68:36:e6:0e:79:5b:3a:f4:db:f8:8b:0a:80:
d4:39:0c:31:ad:02:78:9a:06:d0:a8:b2:39:7d:29:ec:b0:87:
3e:78:35:27:12:d4:1a:39:5b:84:d1:ba:75:43:20:55:49:c6:
a5:c0:83:c6:ab:0d:0b:1d:50:16:dd:bd:0d:c1:db:0c:86:3e:
0a:92:5d:bb:0f:f1:60:83:c2:2c:8b:7f:ad:b3:f9:13:4a:f6:
1c:fc:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:11:02 2024 by rpki-client on console-fra.rpki-client.org