Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer
File: qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer (raw, json)
Hash identifier: 7Al9eQFQHcMOEXUYT3rynPPtPtV+BW8LrpyS06CmSTA=
Subject key identifier: A8:F4:E6:38:D1:FE:DB:32:C5:56:ED:69:7B:D9:6D:CA:DE:9E:DD:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F2A3A33077B2003EA23CBFC996A6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212227
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2a:3a:33:07:7b:20:03:ea:23:cb:fc:99:6a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8f4e638d1fedb32c556ed697bd96dcade9edd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:30:a0:ac:49:45:19:bc:ac:cb:23:73:6a:b8:
b4:de:1a:b1:99:d1:45:88:13:5e:39:d9:0f:69:f0:
4c:58:b7:49:c7:92:2d:90:96:da:b8:1b:b6:6e:6a:
1d:21:83:a5:d3:c2:02:d1:ef:cf:a6:0a:7b:7e:60:
de:0e:05:12:9d:27:ab:d5:d0:d5:d5:69:0e:7a:12:
de:76:91:11:51:4c:0c:b0:19:17:0e:ed:14:4f:5a:
15:ff:f1:55:f1:6a:8a:43:82:44:a2:ad:ef:7d:c6:
0e:41:ae:9c:e4:be:93:32:0e:b3:5f:a5:06:75:30:
fa:b0:20:0d:6a:c1:1f:2f:87:cc:9c:24:f7:d2:98:
c0:22:59:f9:0e:d4:16:f9:13:82:3b:58:6c:74:a8:
a3:3e:30:1a:82:51:fc:8a:e9:bf:79:7c:fd:f7:16:
54:23:08:27:e1:78:55:94:e0:8a:bc:1e:fc:87:86:
e1:01:ab:00:0a:5f:27:ad:d9:52:c3:ff:0b:8b:79:
b4:c5:de:27:f1:9d:e3:d5:0a:43:f6:bc:27:72:d5:
40:7c:76:f6:4f:b3:55:ad:c1:2b:3c:41:19:68:59:
f1:dd:dc:cd:6f:0e:d1:44:c6:ce:a2:86:75:91:a1:
c1:1a:a0:7c:b4:a1:96:9f:c1:50:ee:a5:09:3e:d5:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:E6:38:D1:FE:DB:32:C5:56:ED:69:7B:D9:6D:CA:DE:9E:DD:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212227
Signature Algorithm: sha256WithRSAEncryption
90:69:d6:37:cd:d6:79:c9:d4:4d:7c:ae:6e:dd:9b:69:78:22:
22:2c:93:91:f4:90:13:4b:aa:83:dc:b1:48:7d:33:45:46:00:
d7:70:7f:a7:25:73:27:74:ee:44:87:56:a6:7a:e9:2c:11:62:
0a:f9:e8:46:e6:7b:12:2c:cd:5a:9a:7d:3d:c8:e0:e3:a8:40:
ba:c4:d4:40:37:37:8c:1d:e1:bc:f4:58:e4:c3:48:84:6a:23:
6e:2a:fa:1a:49:f8:2e:13:e5:b5:a4:54:0e:38:44:b8:51:e6:
88:56:6d:aa:0c:c8:2e:03:c1:c7:6f:ff:03:57:42:60:2e:9c:
88:ab:2b:7c:d1:ce:97:07:ac:91:a3:0f:b9:53:23:4d:15:94:
e2:b7:00:20:50:b0:42:1a:b9:c9:5b:70:06:95:d3:ae:78:25:
41:92:42:55:3d:4c:59:b5:82:37:fb:3f:43:89:4c:91:d4:37:
7a:aa:b2:94:51:a8:ef:36:86:8a:68:89:36:9c:58:c9:ac:bd:
5a:13:f1:d2:63:d4:5f:1b:a9:db:47:60:51:33:b3:38:fd:62:
8e:db:bd:b6:e3:ad:07:60:ba:5d:0b:73:ae:f2:6b:5a:67:62:
d4:07:49:54:1e:bc:4a:7c:f1:37:1f:9f:31:0f:62:8a:f2:88:
80:4d:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:44:41 2024 by rpki-client on console-fra.rpki-client.org