Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ikSqR5L1Si-fmMNME9S8fPyaVpE.cer
File: ikSqR5L1Si-fmMNME9S8fPyaVpE.cer (raw, json)
Hash identifier: eUNdOBKmx8otRfPVJLgTUhJr8khWJFRP7WZ18AUFSL8=
Subject key identifier: 8A:44:AA:47:92:F5:4A:2F:9F:98:C3:4C:13:D4:BC:7C:FC:9A:56:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DEDB457B29E83087509A3EBFAB143
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/ikSqR5L1Si-fmMNME9S8fPyaVpE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216410
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ed:b4:57:b2:9e:83:08:75:09:a3:eb:fa:b1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a44aa4792f54a2f9f98c34c13d4bc7cfc9a5691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:a7:65:e3:6b:ff:ae:bb:30:94:7c:5a:09:
bf:b2:b1:64:35:59:a3:18:9b:cc:a4:10:2b:0b:a8:
c5:f5:c3:60:17:2b:24:ad:62:8e:f5:a9:ce:d2:10:
c7:8f:27:f4:48:57:76:c7:6a:41:11:34:4d:2c:6f:
9a:4a:f2:3a:d5:d3:ae:c2:83:88:64:1d:1b:7e:63:
9c:ac:c6:9f:51:d4:b3:31:c9:a4:e3:27:43:71:12:
e8:8c:4c:0b:8c:a4:a2:10:50:14:6e:7d:d7:4a:60:
d9:b8:a4:9c:9c:77:5c:93:8c:92:6d:51:3a:39:e3:
bc:51:71:17:a9:71:c7:26:cd:14:b5:14:09:0d:11:
e8:4d:0a:c2:f8:b6:6d:cc:41:a8:7b:7b:07:f9:ae:
56:8a:89:fd:5c:af:d5:c5:ab:f8:31:fa:33:00:65:
92:15:f4:4d:2b:41:6c:b6:73:86:63:7a:bd:de:23:
ea:b5:bf:78:15:06:36:df:b9:2e:b1:af:20:6e:2f:
8f:48:88:e1:9e:48:c3:3e:b2:a7:29:4e:2c:79:c3:
18:61:1e:90:b6:86:19:89:f7:ee:b5:ab:ad:e2:95:
99:b3:7f:08:6f:44:a8:f1:5f:65:28:f4:8e:c2:12:
ca:8b:f0:24:f0:14:bf:12:f0:3e:c1:af:e5:ac:71:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:44:AA:47:92:F5:4A:2F:9F:98:C3:4C:13:D4:BC:7C:FC:9A:56:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/ikSqR5L1Si-fmMNME9S8fPyaVpE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216410
Signature Algorithm: sha256WithRSAEncryption
41:63:bc:cc:d5:a0:a7:1e:f9:eb:7a:a5:cf:49:a1:cc:9f:bd:
60:43:75:95:92:b1:fc:7b:fa:a1:89:92:5d:d4:6d:28:73:63:
c1:d1:3a:0f:be:c2:be:2b:af:6a:7a:01:51:d7:80:1d:92:ac:
81:06:dd:a1:f9:ae:7f:9a:e5:8f:66:27:91:0e:fd:21:7d:77:
dc:f3:50:9b:e0:b6:0e:59:3e:d3:e7:21:ef:1a:20:80:82:c8:
4f:46:12:f9:b9:89:f8:e8:f5:39:7f:57:74:39:17:ca:9e:bf:
4b:04:1c:7c:0b:6a:a1:2e:df:ac:fb:96:4d:a8:b0:5a:76:67:
5f:61:10:53:dc:24:bb:61:02:34:f4:3b:aa:a6:cc:9f:79:3c:
32:48:30:0b:2b:c7:d5:47:80:88:f9:ec:96:61:d8:c7:76:cd:
b2:c0:62:cf:90:cf:a4:e9:14:b1:bf:58:31:97:16:c2:4a:d0:
2a:c2:e8:0a:a4:24:ff:74:b7:7a:f9:e5:c8:f8:01:6d:76:07:
bd:16:13:1f:f3:54:21:c8:7b:b0:4d:c2:51:98:53:2a:a0:9e:
21:08:27:94:62:1c:ed:be:82:28:6b:1d:40:91:62:09:87:15:
36:0d:b0:40:c0:de:81:e6:43:db:0a:e6:96:8e:ac:d0:52:2b:
54:a9:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:58:50 2024 by rpki-client on console-ams.rpki-client.org