Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
File: rsJF-gJbUVfIedsXr7ao_d4_j08.cer (raw, json)
Hash identifier: gUHVayknksv70l4MWcg2Cwy4qCA5HS5vxiaU2TtlYac=
Subject key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E3EFB69F418065DBF1B0D9D7A947D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199300
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3e:fb:69:f4:18:06:5d:bf:1b:0d:9d:7a:94:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:a1:77:4b:be:c8:72:c4:f9:14:a0:55:9c:
c1:ce:fb:4d:5c:9e:a7:08:c8:16:3c:cb:f7:0c:d8:
97:06:66:38:ca:9f:db:95:29:cf:8c:00:a5:2a:ec:
85:98:a7:ce:93:37:74:c4:c6:eb:72:a4:23:e8:1f:
0a:9f:9e:72:8e:66:44:f1:ba:44:48:d5:bf:79:6e:
81:da:f6:83:f0:13:55:df:0c:9e:34:04:ce:33:ca:
ce:6f:27:a6:1a:bc:02:8f:d9:fd:8f:65:d5:8b:5b:
3d:6b:df:1b:4b:10:39:21:c5:c9:f3:14:6d:97:16:
0f:18:45:09:89:40:e3:a7:6d:c6:e2:df:6e:8a:1f:
1a:63:d7:3c:e3:0e:f5:bb:41:ee:d5:0a:ef:8f:cf:
7c:27:72:7f:c0:d4:3b:46:dc:f7:17:dc:f3:4f:da:
46:6d:41:65:77:a2:cb:99:95:79:9f:ab:08:cf:28:
e1:65:45:2a:69:a0:a2:0b:4d:43:96:c5:f2:17:8e:
50:ac:bd:da:bb:8e:00:34:0f:9a:c2:92:0e:f8:19:
50:4f:20:f1:07:a6:d8:dd:02:4f:96:e9:eb:ce:78:
ec:91:b7:cb:71:94:a7:36:ea:ac:e0:40:63:4c:5c:
46:02:b5:f6:dc:c7:dc:7d:14:97:2a:df:c5:dc:3e:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199300
Signature Algorithm: sha256WithRSAEncryption
63:ba:58:b4:c5:f9:ae:b7:3e:e8:37:4e:8c:29:6a:9b:71:a0:
b9:78:ce:fe:0b:9f:61:d5:ac:a0:dd:a7:53:0c:ae:54:6c:b6:
01:f4:3f:a2:47:58:ec:e7:a4:4d:8d:69:e1:9b:e1:26:26:d4:
bc:d5:9f:02:d4:1e:9e:c9:e1:33:78:2e:1d:13:6a:6f:f6:3b:
fe:14:12:9f:d2:80:ff:2f:9a:f1:ca:22:d2:42:71:40:dd:52:
8f:c3:7b:5a:5c:6c:f6:ac:61:f8:a2:31:ee:b7:fe:c7:52:3b:
c7:16:56:26:a4:f7:04:3e:a5:b1:83:70:db:ad:03:cf:e4:2f:
79:57:13:ca:44:6f:ff:43:87:0c:e8:74:0e:bf:76:15:17:43:
87:61:64:86:71:b1:bd:4a:4c:57:a5:c8:1f:44:ad:7e:a7:b1:
2a:08:bc:ea:40:49:82:18:0d:b9:e5:ec:00:b0:a8:aa:83:f8:
3c:08:f8:a6:d3:4d:5d:e5:6b:0d:d3:b0:b5:a5:e6:16:7c:f7:
e8:eb:28:3e:4f:de:1b:7a:dd:ad:68:0a:00:16:96:b7:05:89:
f2:82:13:c0:ce:8e:61:48:30:57:31:03:dc:a7:67:67:32:12:
03:8b:40:0e:99:c9:ba:f8:7f:e6:93:52:2e:7c:01:70:b8:b8:
7c:52:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:01:35 2024 by rpki-client on console-fra.rpki-client.org