Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ik6sZlqUeY_Q3eokF27l4MC3dDo.cer
File: ik6sZlqUeY_Q3eokF27l4MC3dDo.cer (raw, json)
Hash identifier: mJirVcDYh4F04BFRTAwepbkr4NdmfcwggygM2M6iV/c=
Subject key identifier: 8A:4E:AC:66:5A:94:79:8F:D0:DD:EA:24:17:6E:E5:E0:C0:B7:74:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC698173752EE3114BA0A93CAE4F72BD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.mft
caRepository: rsync://rpki.nap.re/repo/pongery/1/
Notify URL: https://rpki.nap.re:3030/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 19:55:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200160
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:98:17:37:52:ee:31:14:ba:0a:93:ca:e4:f7:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a4eac665a94798fd0ddea24176ee5e0c0b7743a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:5b:b6:9f:68:af:b7:91:a1:a3:38:46:3a:
ce:e7:3f:d9:28:01:ac:2a:24:d7:ef:f9:1d:c3:c1:
0b:d8:58:40:2a:fb:42:d0:35:d4:7a:02:43:a9:93:
6b:06:58:38:d3:42:b4:01:ee:34:6c:68:af:f4:bb:
15:17:f7:e6:a2:fb:19:37:08:3a:1b:c4:03:86:dc:
eb:cc:66:66:6a:ad:2b:a6:ba:2e:3d:8f:80:44:68:
d9:3d:06:1f:da:d4:b3:97:a7:73:f4:b0:61:e5:90:
58:32:86:35:56:ee:26:f6:5d:77:38:64:ba:f3:a3:
64:e1:53:50:e6:30:e6:c2:56:5c:c9:72:68:9c:b5:
6a:3f:0c:a4:c0:11:2b:73:80:85:05:53:16:6a:c8:
86:0e:b1:1e:fa:f5:71:5b:4f:cb:32:f3:0f:38:00:
d7:ff:dd:4e:fa:2a:89:1d:22:5a:18:91:63:c8:18:
29:73:d7:c3:bb:f5:1c:6c:01:dc:1f:9e:71:2d:47:
57:14:4e:13:3f:55:5b:99:6f:fa:b7:9b:d2:c6:1f:
19:30:1b:00:7b:42:64:07:c7:40:e4:e9:ae:0b:65:
3d:9e:ec:83:8b:4c:f6:42:32:d7:90:cc:35:4a:43:
c1:87:88:03:8e:8e:d5:0b:f9:ae:14:76:04:17:92:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4E:AC:66:5A:94:79:8F:D0:DD:EA:24:17:6E:E5:E0:C0:B7:74:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.nap.re/repo/pongery/1/
RPKI Manifest - URI:rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.mft
RPKI Notify - URI:https://rpki.nap.re:3030/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200160
Signature Algorithm: sha256WithRSAEncryption
69:5c:cb:a8:31:9a:73:5b:55:3d:e8:9c:5e:86:32:3d:46:e0:
ef:cd:91:67:06:62:fd:f1:67:00:ab:2d:38:02:57:88:1e:ab:
7d:eb:97:22:d1:ee:5d:6b:82:dd:f4:12:69:d4:c9:6d:9b:87:
e6:18:95:9f:d4:21:a9:ad:7a:f5:52:3c:07:5f:8a:a7:62:84:
ce:09:52:13:33:23:35:a6:61:f5:17:60:8f:1e:89:d2:eb:b0:
8b:8d:5f:b5:21:5f:de:36:50:43:b5:d6:69:bb:bc:4f:08:5b:
1e:0c:f2:d8:32:c8:51:ec:1a:11:df:0f:90:22:3d:1d:21:87:
4a:d9:26:4b:bb:52:8d:18:77:6c:9e:03:cc:0c:08:82:fb:04:
e8:51:a0:ca:cc:a5:d1:8e:97:15:ed:67:f0:bf:b8:bb:eb:e6:
e1:c8:0b:2d:48:fe:ff:f4:9b:6a:da:80:28:7b:fd:db:39:01:
49:67:dc:d8:13:78:4f:91:1e:93:a0:a3:b6:85:19:50:e2:3f:
fd:c5:00:18:1e:9a:4c:0a:3b:e8:c9:f4:12:20:a8:e4:1a:07:
b6:67:f1:c3:dc:6f:44:02:49:71:31:6e:09:fe:4c:18:ec:b3:
d4:31:6c:d2:d9:07:bd:fc:b3:ae:22:81:39:29:87:68:40:9c:
c4:e2:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:26 2024 by rpki-client on console-fra.rpki-client.org