Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
File: qjX0oGEfcqiSww2CEtIfhswTqWc.cer (raw, json)
Hash identifier: MdMhztGt9VrkPG2B1WsGPG0Zqq8WuZx8KyrmzNbXJ5M=
Subject key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D236621EBCBF210C6D4C9A213BF78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216081
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:23:66:21:eb:cb:f2:10:c6:d4:c9:a2:13:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:9d:78:4a:e9:a0:9a:e3:87:62:23:5c:f7:
20:48:eb:af:2e:d1:a4:d8:b1:83:ec:a4:af:3f:6e:
a8:3d:22:48:f9:b5:be:14:f2:b2:d4:cd:fe:6b:98:
9d:c9:85:a0:fb:5d:eb:cf:0e:28:a1:d5:e2:e0:9f:
f4:32:8c:b7:ff:6e:5f:d5:86:a6:dc:a3:a7:f0:9a:
8c:82:7a:5e:17:a1:fb:79:34:de:e6:44:21:3c:d5:
ee:34:7b:6e:1e:72:c4:e8:86:64:03:8e:7b:73:67:
a0:79:aa:f2:14:02:3a:f4:22:d9:38:ad:b2:b3:9a:
d2:d6:3c:e4:96:0f:c9:cd:a3:9e:e2:47:ea:9e:7c:
5e:2e:07:da:86:3b:8f:17:79:65:e3:c9:fe:c3:6c:
64:6f:74:da:20:ee:91:73:35:31:5e:b5:f4:6e:20:
6a:e5:4b:e3:f3:4a:42:26:ac:de:b7:81:34:2f:45:
7c:1b:30:ec:2d:6a:f6:ee:06:76:61:42:21:4c:f7:
1e:02:ae:43:28:f9:47:86:cb:7b:27:82:e6:8b:30:
20:b9:bd:61:b0:79:c8:3f:74:b5:db:1b:22:79:2b:
f2:2d:4c:54:e3:75:a0:48:08:33:6c:43:a4:c4:cf:
7c:98:0d:53:2b:f2:c3:1c:b3:4d:a8:d2:c8:48:08:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216081
Signature Algorithm: sha256WithRSAEncryption
9f:a3:9c:9c:c7:2c:b6:23:00:29:27:23:af:27:cd:be:c5:1c:
19:3d:55:22:34:f5:0a:55:fc:18:ba:7d:83:ec:fe:90:0e:69:
12:e4:08:58:42:5c:60:99:6e:03:d1:d5:aa:bb:c2:9a:93:ae:
1d:a6:ba:38:ec:c2:1c:35:8d:c4:8e:10:b7:1e:e3:43:37:55:
0b:52:7a:2c:5a:c7:ce:6b:21:e9:35:fe:34:cd:23:4b:a7:15:
6c:7a:0e:b7:ee:cd:97:a0:a0:28:4b:69:06:58:0e:18:f1:48:
ae:06:38:31:87:71:32:81:66:30:ce:29:96:2a:e4:29:27:61:
d3:c6:40:67:58:4e:e6:ef:6e:00:71:2f:31:06:e6:e0:fe:f7:
9f:15:3f:80:6f:25:2f:58:c0:22:82:0e:98:20:ef:1d:9e:8b:
de:56:f6:04:53:55:b4:4d:2a:4f:85:07:cd:fd:7b:80:25:db:
b4:51:0d:b0:58:8e:f6:89:19:15:1f:16:48:f8:e2:90:e8:94:
6c:5b:78:15:9c:56:e5:16:2a:b1:49:e5:49:86:d9:19:fd:d0:
24:77:03:1e:d5:f2:bb:60:de:5c:3b:97:67:0a:cc:d8:ef:e2:
da:c5:c5:47:df:90:74:ce:09:85:da:1c:c0:af:a2:be:fd:65:
a2:ba:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:07:12 2024 by rpki-client on console-fra.rpki-client.org