Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/soehvthfaZtS-gaqGeUc8liPFLk.cer
File: soehvthfaZtS-gaqGeUc8liPFLk.cer (raw, json)
Hash identifier: bWy2ss3P7r7r3of1vYikqdjOzyQvE8ZibZiSYqhZ0xQ=
Subject key identifier: B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492F0834261C406ACC10C3BF0EB3D05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209645
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:f0:83:42:61:c4:06:ac:c1:0c:3b:f0:eb:3d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b287a1bed85f699b52fa06aa19e51cf2588f14b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:4f:fd:c4:d9:6b:27:53:9c:b4:85:be:04:
93:47:d6:25:eb:91:08:b7:ce:5a:8b:8e:b4:ba:74:
9f:ec:bf:86:d2:c7:9b:f1:5e:66:93:f1:9b:a1:b4:
5d:ac:df:77:db:00:a5:a0:14:d1:b5:92:79:39:5c:
24:15:5f:b2:01:52:f9:3e:f7:a1:58:8f:ad:c5:11:
a1:dc:8e:c7:99:48:cb:e0:dc:3a:28:db:4d:e1:85:
87:24:13:3f:41:81:9f:e0:bc:8a:36:5b:b2:1c:6b:
2a:41:10:33:cb:3e:50:de:9d:08:00:e7:53:ca:c8:
78:ae:98:89:04:43:e8:9c:bf:87:06:82:72:45:bc:
e5:fc:b4:f5:4d:19:58:5a:6c:80:4d:f3:b9:13:75:
9e:4c:a9:0b:b3:28:9c:53:70:ee:0b:d7:c9:60:29:
b6:ec:64:80:bb:36:34:2f:2c:f4:f0:46:a0:c8:b8:
3b:a7:30:7c:11:23:13:09:e0:87:57:67:0d:3b:01:
b4:50:09:95:a1:8e:df:d3:96:7e:a4:b8:3f:71:1b:
ec:23:b4:2d:68:17:e7:dd:9e:a8:6d:5c:67:27:8a:
cc:3e:ca:23:83:55:9a:fa:0b:90:e6:3e:01:cc:ec:
4c:18:3d:26:74:4c:aa:77:b5:ae:95:e8:11:6e:f1:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209645
Signature Algorithm: sha256WithRSAEncryption
09:e6:81:1d:dd:22:03:39:98:d9:9e:22:95:bc:67:7d:95:88:
6f:79:32:bf:fc:fe:7b:26:be:49:77:f5:fc:29:04:fc:ec:89:
32:99:65:7c:ca:6f:aa:e2:0f:bf:92:53:ec:6e:22:ec:35:45:
25:65:c8:3a:4d:d1:ce:8c:37:43:2f:be:ae:4b:65:24:02:fd:
ae:df:01:7d:24:dc:00:40:3e:3d:7e:71:31:2f:e2:57:af:b5:
2d:12:c8:67:0b:b8:f3:60:d8:7c:53:4c:a1:89:c9:8d:53:5d:
9c:06:25:64:2e:c3:1e:f1:a8:68:0c:bf:d8:85:6d:a8:18:11:
64:ce:b0:63:d8:04:4d:47:10:3d:a6:23:27:ad:f5:74:75:8b:
67:a4:a5:e6:7c:60:56:7d:a8:fd:ad:be:89:e8:76:5b:25:79:
1c:11:b1:67:36:73:37:93:45:3c:18:c3:59:1c:c7:dc:ef:88:
88:c8:41:1d:51:96:63:bd:e9:35:cb:8d:9e:71:f7:5f:35:e6:
ef:90:9a:75:c2:8e:1e:e5:96:bb:bd:1c:59:c0:4f:59:3c:d1:
18:e8:aa:58:3d:b0:51:65:26:bd:99:f8:ab:cb:6d:f3:d3:6d:
3c:50:b8:f3:bd:29:92:bf:7d:45:65:3f:5b:42:ae:37:89:25:
93:d2:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:21:51 2024 by rpki-client on console-fra.rpki-client.org