Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.cer (raw, json)
Hash identifier: 6Ofz9Zq2MK/P0zrlwtBwa9PVZHXX319Av9u7EuE3o0o=
Subject key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190394C380C17678513E82E23F380414985
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Jun 2024 05:36:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214676
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:4c:38:0c:17:67:85:13:e8:2e:23:f3:80:41:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 21 05:36:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:26:a4:3a:86:56:e4:a9:e0:d5:e9:ad:06:
90:e0:88:97:b5:d8:a0:7b:2f:84:92:00:97:c9:00:
2c:d0:19:bc:92:ab:ce:f8:43:e2:41:d3:7e:89:8b:
b4:fc:2c:1e:09:76:4e:c0:05:3a:28:2c:45:94:08:
16:55:75:e9:99:7c:0b:df:63:c1:b8:39:f1:ae:d8:
bf:8d:8c:66:3c:bb:2e:6f:c5:b4:ca:d1:4c:2c:17:
14:89:f7:ef:9b:2c:91:e2:c5:4b:89:5e:76:18:92:
d8:76:ff:19:a2:ed:c9:f1:63:6b:11:b0:3f:01:ce:
6b:38:8f:d0:49:c2:c6:3f:8d:c4:f1:24:72:00:1f:
92:af:0b:db:66:80:0e:9f:f2:19:fa:d0:3f:60:d4:
44:94:21:f7:d7:80:4e:5c:d6:94:c1:11:79:e8:a8:
2e:33:f6:c0:af:30:ad:dc:62:ea:ed:1e:22:c2:15:
05:19:23:99:b1:41:40:e2:5a:9e:a5:b5:2e:70:22:
cb:3d:33:fd:08:71:4d:35:99:70:80:03:84:7f:70:
14:9f:66:59:9a:4a:7e:56:fe:c4:26:c8:c5:12:8a:
a6:ee:ac:fa:66:0b:dc:6c:0c:a0:86:66:9c:a9:5b:
b0:5a:15:43:55:be:22:57:87:09:fb:30:1a:0a:6c:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214676
Signature Algorithm: sha256WithRSAEncryption
a2:5b:63:20:5e:dc:0d:c8:6a:3b:67:8f:af:b9:cc:b2:da:ef:
b8:4a:c2:d8:d5:0e:50:0a:6f:a5:8f:da:03:c7:08:2c:22:8a:
e8:13:03:19:27:f4:96:99:d6:a9:56:a1:96:c1:c0:61:92:f2:
ec:1a:e1:22:73:9c:83:9a:36:60:5f:42:f6:78:9b:0c:d1:76:
d0:81:b4:67:b3:36:e2:86:fa:59:0f:36:e7:e9:dc:0a:a0:9b:
a9:04:90:c7:59:2c:8d:6c:d0:44:27:8d:66:9a:90:37:35:45:
4f:73:7f:51:e4:ed:3d:03:fa:f0:46:7e:8d:24:73:6a:bb:76:
c3:cc:2e:2d:ac:78:ef:bd:8e:10:5f:cd:81:26:c0:bb:70:e6:
53:e4:a7:51:7f:2b:8f:80:6e:9a:0b:57:e4:1d:67:0d:99:79:
8b:8a:02:df:9b:81:25:be:7a:24:19:ca:c3:31:1d:fa:98:88:
0c:b0:7f:1c:77:21:5d:76:b9:d6:95:24:f6:b9:e3:08:de:9b:
4e:91:f5:a4:5d:54:34:ae:d1:e0:7f:62:30:ca:a0:ee:de:64:
d0:a7:5c:ab:0c:68:eb:59:4f:0c:e1:25:d3:67:12:84:3a:57:
61:43:93:2b:93:4e:bc:fe:b5:52:85:68:cc:95:b2:cf:4d:4d:
5e:12:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:21:59 2024 by rpki-client on console-ams.rpki-client.org