Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
File: l09E3NQWSVIZQTwbDWmh-H9Qcog.cer (raw, json)
Hash identifier: V8iej5hsxtpFfTAwFTpXyFWkjMCjFz+2csmgN58jCtU=
Subject key identifier: 97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC255F0DFE3AB3F98581E16DBDBC8DE32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:04:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212245
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:55:f0:df:e3:ab:3f:98:58:1e:16:db:db:c8:de:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=974f44dcd416495219413c1b0d69a1f87f507288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:4f:9a:fc:bb:dd:a2:f1:24:a2:76:17:75:
0a:94:ca:b8:10:d4:74:8c:4a:9e:8f:24:c4:11:15:
df:e8:ed:cd:11:61:d1:c5:ad:73:37:a0:3a:fc:9c:
3b:29:97:72:01:89:89:f0:5c:9a:15:12:89:98:5e:
4e:cd:5b:b2:15:6f:bb:47:f6:85:51:35:6d:b5:e8:
8b:9c:25:34:fd:e9:d3:8e:3d:8f:7c:68:e0:74:67:
c2:5b:12:d5:b3:de:39:ae:ff:fb:f6:40:39:d3:3e:
e7:c2:25:f5:33:f6:c1:e1:78:a9:2e:75:68:03:3f:
c7:06:f3:d1:78:ba:a7:29:59:a4:39:a5:ec:f4:32:
68:fa:d2:13:b7:8f:72:33:3f:b0:ce:24:8a:0c:05:
94:ee:58:f2:d4:39:06:2c:16:82:1d:e4:90:99:b8:
fb:78:9f:fc:72:04:d7:65:fe:8f:ce:32:b5:0c:49:
85:55:f8:e2:07:ff:e5:6c:9b:d4:62:0d:dc:7e:47:
06:75:1a:ca:17:38:de:f6:a2:bc:e2:bb:be:b5:af:
e3:15:09:f3:29:5a:f5:c7:8c:01:0d:21:21:c3:7a:
0b:ad:98:fb:9a:79:21:74:f3:b8:ce:b5:e0:aa:be:
eb:b8:ea:62:3f:8f:4e:7f:ac:96:57:cc:f8:a3:5f:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212245
Signature Algorithm: sha256WithRSAEncryption
1b:2f:71:e5:e1:81:f2:78:0b:d8:63:48:3c:04:d1:be:3c:38:
7a:38:b0:6c:95:66:61:2e:61:c4:69:68:d2:aa:e9:7f:e2:20:
a6:0d:9e:58:f9:62:14:d0:f7:65:1a:e9:33:71:d8:d2:9a:82:
07:82:4b:06:20:a3:6f:d5:77:70:a7:67:3c:74:62:d9:81:f2:
7c:06:15:4a:ad:e3:cc:45:ae:9c:ea:85:58:fc:d7:e4:75:3e:
37:9c:73:a3:1d:55:54:0d:0e:8e:d1:2e:25:f6:46:92:b9:de:
82:a7:7d:16:6d:05:53:e3:35:27:24:3c:1d:7c:2d:a2:4e:83:
d1:af:ee:55:fe:60:d9:37:01:65:bc:a0:cc:da:91:29:ea:28:
fe:8c:7f:ee:02:53:39:dc:ae:57:95:f2:07:ca:3e:de:03:8d:
bf:98:6b:31:e7:96:c7:be:d6:48:e1:1a:2e:50:a0:00:de:00:
f8:a6:5e:ca:ec:83:79:71:9d:ca:c4:ca:fb:16:e6:84:77:89:
62:47:ae:82:59:84:82:76:d5:7f:21:ca:11:b6:84:cc:da:fd:
42:f7:54:97:5e:98:ba:fc:82:7d:03:45:5b:53:ed:50:22:da:
db:be:01:3a:e0:9b:db:99:78:3a:6d:9b:81:c2:90:b8:18:79:
c5:a3:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:11:58 2024 by rpki-client on console-ams.rpki-client.org