Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
File: igr5b5WYkhMXjTPWXwcOj7L-N98.cer (raw, json)
Hash identifier: wdd+cce7qSIME+q2YR0h+jjjXPiCjkOIFaUEmffuvRk=
Subject key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500FE73A3DA655FEB29C4D3A35C85E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48278
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fe:73:a3:da:65:5f:eb:29:c4:d3:a3:5c:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:d5:b4:e4:b2:d5:04:79:4d:7b:fa:fa:1f:
05:32:29:a1:c1:23:e1:9f:4f:fc:cd:42:2e:0e:ab:
48:f4:63:47:e4:63:13:47:7b:a9:de:03:de:2d:d8:
c7:32:e6:ef:a8:d4:46:47:8d:65:39:7a:f6:09:83:
88:94:ba:69:8c:03:83:68:59:d2:5a:7c:1f:40:c9:
5a:e3:eb:d3:2f:1a:6f:f4:77:e1:bf:cc:9d:a2:1c:
c0:c8:02:94:1a:3e:f2:94:f0:16:bb:ef:bb:c5:af:
37:a2:48:05:b5:d3:e6:3b:8c:d9:90:b7:b5:48:4f:
44:4b:eb:77:a8:e7:00:7b:eb:a5:59:6d:fb:5b:de:
8f:f1:1e:31:86:f1:ae:a9:97:63:d4:da:1d:6c:84:
92:c8:75:dc:09:a4:62:c6:7b:59:75:6b:4d:37:b0:
89:42:0d:0d:2a:07:80:9e:1e:03:2e:5b:af:a4:c3:
94:8d:a2:88:ed:41:c6:c1:3f:51:a6:72:d1:87:e8:
22:0c:6a:91:d3:d3:a6:53:f0:da:da:66:84:02:72:
85:0a:62:79:1c:71:22:ec:94:c9:85:ae:21:9d:24:
74:3d:06:dc:d3:22:51:3f:66:90:e3:3a:30:1a:ab:
a6:0f:1c:fa:81:30:62:41:e6:54:bc:cd:1b:89:d1:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48278
Signature Algorithm: sha256WithRSAEncryption
4d:03:40:9b:3b:d6:eb:43:91:f1:87:2f:66:24:4d:45:94:61:
5d:69:1b:89:5a:9f:7c:e0:db:3f:ee:25:89:6b:4d:2d:f4:75:
17:e2:e3:0b:e8:75:5e:4d:9d:27:1d:c8:3f:9a:32:9d:e8:68:
65:00:b3:dd:40:31:ed:bb:6b:b0:41:e1:7f:5a:ca:df:09:9f:
2f:98:81:ff:f3:82:24:7f:d2:2c:46:50:39:76:fd:3f:7a:05:
83:e9:81:cd:e9:be:23:f2:90:44:a6:64:dc:cb:aa:bd:76:5a:
1f:00:54:cc:32:55:80:3e:a2:af:b4:0a:43:6a:b5:3c:c5:55:
f2:18:c5:1d:da:1d:99:c9:e3:5f:fc:d9:ff:af:45:94:26:99:
4b:aa:85:8c:90:b1:92:f0:c1:4d:8a:0c:8c:ca:aa:4e:89:99:
c5:fe:b4:1b:b9:a7:94:cf:f5:b1:97:8f:54:40:e0:dd:6a:3d:
93:e4:12:f9:bf:8b:4b:2d:46:4a:41:79:07:ea:14:c0:48:ce:
98:bf:41:57:19:41:1d:bf:a5:1e:dc:9b:62:74:35:42:53:43:
51:db:75:74:0c:22:b9:bb:15:87:1d:df:18:2a:c7:4e:67:c2:
61:3a:1b:94:90:f1:2c:bb:0c:4c:ff:ba:48:0f:cb:e8:fa:82:
ea:69:9f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:11 2024 by rpki-client on console-fra.rpki-client.org