Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
File: pmAQdyZRcCotMzyDFfGukvbMdJA.cer (raw, json)
Hash identifier: WZLCLF5D6lHxgzHTfrRlIdljizr/mb6nkK4uXKyyDNU=
Subject key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC496EAA1353CDDA07E60F80EA1062
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207301
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:49:6e:aa:13:53:cd:da:07:e6:0f:80:ea:10:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:1c:0d:46:e5:5c:62:2e:ed:20:47:d0:d4:
e6:11:e2:81:94:65:5e:63:35:cc:e0:96:b4:f8:d2:
28:0e:6e:8a:87:84:84:6e:a9:64:c6:ce:26:09:21:
37:0e:78:49:0c:be:e8:5a:ec:46:95:f3:ed:a4:9e:
2a:e2:d8:64:a7:39:52:2a:2a:f4:95:25:b4:f4:48:
98:29:63:7f:9f:62:ab:c4:8b:0f:c4:85:5e:db:b1:
fa:03:86:67:75:02:42:ff:87:d9:7a:de:59:77:e5:
0d:b5:af:82:f7:3b:7e:6b:ec:c7:4d:83:44:fc:1a:
c2:35:4b:16:4e:19:fe:18:a5:0e:dd:26:dd:0c:b5:
ff:56:a8:d0:ad:69:b5:99:c8:be:17:26:50:7e:6d:
08:ec:d1:f9:81:c6:e7:ba:ba:02:28:bc:5d:ad:e5:
86:f7:54:bd:d0:ea:24:9b:ac:74:f1:17:7f:ad:4a:
6f:4c:4d:a0:61:d3:c5:c1:31:9f:80:9b:17:e8:95:
e0:a2:db:c0:51:1d:6f:00:ee:12:6e:91:4f:2f:60:
fd:0d:48:5c:98:cb:89:fc:b9:f1:35:a2:56:fa:62:
be:91:fc:60:dc:5a:88:db:b8:b7:80:e9:8b:54:ec:
77:ba:ff:32:ef:16:fe:ff:17:cd:40:be:e6:cf:7c:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207301
Signature Algorithm: sha256WithRSAEncryption
32:a1:2d:a7:3e:b6:f2:16:3a:85:0f:e7:49:09:29:93:ba:dc:
dd:66:2b:0b:ad:f0:45:1f:29:a4:f7:ec:8d:5c:df:28:af:1e:
3d:19:5a:1c:d7:ee:f6:e1:fe:f9:1f:e8:9e:5c:35:02:45:b0:
ef:6c:9a:07:4e:89:19:91:6f:30:78:ae:45:85:f9:ff:23:74:
5e:b0:c5:fc:6d:32:09:7b:cb:01:59:4b:0d:c2:38:c9:a5:05:
eb:2f:33:8d:23:c0:12:49:21:e6:7d:29:34:db:5f:6b:e9:39:
fa:88:a5:fe:40:17:bd:5e:02:ed:1d:30:1b:aa:3f:fd:ad:5c:
b7:4d:c6:be:5f:3e:48:31:94:90:d6:9b:06:2c:3f:eb:3c:6e:
2a:a3:a4:54:47:5c:2a:59:d0:82:1a:a0:2b:8e:4d:48:c7:37:
74:6f:3c:18:14:0d:48:dc:07:36:9e:b7:c5:27:1a:84:a7:f3:
3a:a2:ed:e7:99:42:3b:ba:11:1e:10:c8:6f:af:dc:92:00:1b:
1b:e9:06:e1:48:25:30:8d:2d:ef:66:af:69:42:98:b2:46:1c:
45:48:42:be:be:f2:7c:4d:ae:e6:64:cd:bd:9b:18:7c:85:54:
a4:b9:db:ff:64:21:a4:07:7e:d1:66:ac:b9:21:c5:72:42:56:
6e:c4:2c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:15:01 2024 by rpki-client on console-ams.rpki-client.org