Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
File: o6_aacqxv_Ujyj71dLh8oTD96iw.cer (raw, json)
Hash identifier: sX8rctLU8MlWM28b58QaYEb1m2urHMmXqbZ/GLyjg7Q=
Subject key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424F1F9E2D78CF46EB74609C1999B5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212357
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f1:f9:e2:d7:8c:f4:6e:b7:46:09:c1:99:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:98:a6:17:1e:83:eb:dc:83:2e:67:fd:cc:
ba:03:d9:b6:07:c1:3b:db:30:75:9b:ad:23:e6:34:
92:24:16:81:1c:ac:64:04:67:55:ae:ad:72:ba:65:
04:95:18:26:0e:cb:98:27:34:94:42:db:55:7e:a2:
25:a0:50:74:4e:e5:71:c5:67:90:a4:88:8b:1f:db:
f0:e7:4c:7d:92:64:90:f5:3f:c6:d5:36:cb:d9:5e:
f7:dc:fe:97:0a:54:a4:b1:95:cf:45:dc:ff:f3:99:
dd:91:38:2e:86:51:11:49:ed:15:c5:c0:dd:f5:2a:
f9:f6:a1:ba:b3:34:f5:7d:fb:cd:92:d2:43:0b:95:
43:8d:d5:b3:b3:2e:4d:cc:2f:5d:1e:ad:b3:7c:76:
65:3a:a5:3f:75:09:3e:73:96:9d:ae:5d:0b:84:d3:
78:e7:4f:55:21:f3:b4:fb:46:bf:bb:cc:12:61:a9:
f2:23:0d:ce:4d:75:2e:17:5f:1c:01:0f:51:8c:d1:
4a:19:60:84:96:da:1f:94:72:ec:1e:b9:8f:94:ca:
15:0b:9f:cf:90:d4:3d:bb:fc:06:de:2e:7d:4e:d1:
e1:7e:07:e9:53:c1:d0:3e:7f:3c:ca:bf:7f:2a:85:
7f:ed:fe:58:8a:40:ea:b7:3d:ae:4d:e6:d6:33:76:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212357
Signature Algorithm: sha256WithRSAEncryption
9b:9b:33:e2:5d:e3:fb:e2:d3:1f:83:28:d4:81:1d:62:30:a3:
7c:4c:20:63:70:41:22:ab:af:3b:50:4e:d1:99:2b:e6:e1:5b:
bd:e6:2d:d4:8c:3f:1a:0c:ae:32:3e:6c:00:e3:08:e3:0f:bd:
80:ef:c3:5a:49:ad:6a:4c:61:01:c3:8d:45:19:f3:98:37:47:
6c:46:0b:8b:b2:42:39:5c:4c:a3:9f:8f:2f:80:9b:dc:69:91:
4d:68:35:0b:dc:cf:e5:3a:63:25:68:de:14:ee:53:54:77:fb:
90:f5:be:e7:b3:ac:8b:d6:a4:e4:87:87:aa:1a:df:64:0c:77:
69:b9:63:f2:dc:fc:f5:ee:95:60:74:be:35:39:24:e3:b1:40:
c5:40:f4:f7:64:5b:99:6a:07:37:69:c5:77:20:ff:0e:24:41:
6c:3f:f6:12:36:8d:6e:da:42:8c:f8:37:17:1d:01:c6:0d:aa:
4e:a4:f9:4e:20:ad:2e:07:aa:83:6a:62:d1:8c:44:85:1a:3f:
cd:bc:28:e1:83:5a:44:fd:6f:b1:ff:95:92:39:a4:07:32:1f:
de:3a:97:75:ed:a7:e6:e7:30:2b:71:71:43:91:fb:a1:b7:0e:
68:d3:06:11:f3:73:63:00:49:06:70:1e:db:20:9b:09:c7:98:
83:e5:d6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:21:38 2024 by rpki-client on console-fra.rpki-client.org