Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
File: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer (raw, json)
Hash identifier: CaD0TFNHgbT7q+EFUJdo5g7M5foWyulcMfqISe+/mrE=
Subject key identifier: B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01933BC7E7F5208A90FDC47F4B3B5F484BE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 17 Nov 2024 20:19:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208127
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3b:c7:e7:f5:20:8a:90:fd:c4:7f:4b:3b:5f:48:4b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 17 20:19:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:35:3a:57:a7:7c:d0:8b:e1:d6:c8:f2:ba:
6e:fb:80:f7:7c:bf:30:51:31:f9:0d:da:db:1f:e4:
6e:09:4f:ed:a6:b9:2b:0f:78:f6:a9:9b:0a:e7:9a:
ba:61:3d:46:c5:1d:27:ce:e2:e5:5e:b0:17:ea:0d:
e4:9c:01:13:48:bc:78:6f:e8:24:bd:5f:6f:3a:63:
05:bf:79:d3:cc:43:d7:10:7d:10:24:7e:ec:98:87:
26:21:a6:60:b9:1d:e2:0a:eb:01:c1:c7:6d:4f:75:
37:03:ab:61:9a:a8:b9:45:a1:08:03:0e:c1:ec:69:
81:1a:f4:e5:72:b0:8d:de:c9:6c:98:27:33:b2:dc:
02:ae:4f:4a:f2:97:e6:9e:f3:52:02:a2:39:54:67:
1f:a9:3f:db:bd:6c:e8:49:65:03:41:4b:11:9e:10:
75:62:28:03:fa:80:5d:03:3d:53:90:90:00:de:ff:
cd:f2:b5:2f:fe:af:b0:9c:a2:55:24:1b:df:75:23:
4f:b1:f0:77:64:4d:0f:dc:5d:ba:b7:a8:a6:e1:33:
eb:b5:5c:2b:52:f3:27:3a:25:d2:16:b3:b4:50:97:
82:c9:91:87:1b:24:6b:a5:0e:2d:52:65:e3:15:00:
3f:c1:9a:00:97:cb:76:b6:d3:e9:1d:e5:df:f7:ca:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208127
Signature Algorithm: sha256WithRSAEncryption
45:65:2a:75:37:5d:51:57:df:8e:2e:93:f0:98:bf:a8:61:c7:
7f:24:ef:15:92:aa:1c:35:4f:14:61:f7:85:8c:dc:d6:e6:54:
35:d1:60:e7:cf:98:03:90:09:17:10:21:e1:ff:8e:50:1d:80:
40:b1:3b:5d:cf:0b:a4:9a:8f:7c:c2:d8:c4:ff:cb:48:5a:3e:
1f:a1:1b:7d:7f:a2:e5:a7:b4:e0:92:fa:0d:ad:0e:65:5c:c6:
d0:97:ef:68:c7:d0:6e:71:48:41:32:b9:28:aa:23:9a:42:68:
8a:5f:90:72:3c:77:75:82:5e:dd:c9:1e:22:6d:34:24:d1:9d:
26:f5:5d:db:3d:fc:f5:0f:dd:bd:b9:2c:f7:49:6c:d0:76:7c:
52:2e:fd:36:d1:17:cd:38:42:17:c7:4f:2a:e1:f3:df:a1:fd:
df:41:69:eb:dd:88:c6:8a:9c:ff:aa:cd:e2:37:e2:fa:6b:aa:
d2:14:88:b3:75:84:cb:b7:cd:bd:68:db:f5:70:b4:fc:f6:c4:
0e:9f:0b:ab:60:ab:4d:de:f0:db:26:2d:85:6a:45:10:0c:4f:
48:f3:a5:3a:8f:61:0b:01:81:aa:01:d9:d1:00:85:59:1b:be:
dd:42:b0:4b:38:cf:db:93:7f:fb:ab:37:11:7f:16:bd:4f:3e:
a4:1d:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:15 2024 by rpki-client on console-ams.rpki-client.org