Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
File: sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer (raw, json)
Hash identifier: qIvqecuOg7OmYAK2enG796XZHIJOkmPXrlDtbGCo0z8=
Subject key identifier: B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E5458F5AD0CF6D943031AC0F20159
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197622
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:54:58:f5:ad:0c:f6:d9:43:03:1a:c0:f2:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:9c:e6:a2:96:00:5c:e3:cf:7b:7f:30:61:
01:eb:cf:af:18:39:2f:a4:cd:ab:20:6a:2e:9a:62:
9c:ab:97:6e:94:4b:7c:f3:db:ab:ad:63:2a:ec:3a:
dc:17:cb:a2:97:ea:bc:28:8a:9a:9d:c3:5c:c8:2b:
0b:88:27:62:c2:ea:d6:b2:5e:d3:48:3b:ce:3d:84:
52:18:97:1a:7c:cb:c8:7f:3b:12:89:11:9a:c8:20:
27:c1:c0:b0:3b:27:69:d1:18:40:19:24:6c:1e:a9:
36:88:43:0f:e3:52:fd:c9:f9:e2:80:0b:27:45:3e:
fb:54:83:a3:81:2f:20:f7:6f:e4:b6:4b:37:67:b4:
07:78:85:0c:06:d4:93:63:44:74:d6:85:3a:c2:d0:
29:9c:23:59:7d:36:8a:55:4b:9e:69:f8:a5:20:c9:
6d:ff:0e:f1:5c:a8:74:8d:ec:f3:41:1a:13:d0:b3:
25:39:9d:0c:b7:53:fb:7e:83:8d:3a:d8:d0:49:01:
78:64:7e:66:5d:23:f4:dd:4f:dd:62:2a:6e:9f:a9:
b7:a9:44:06:9b:00:17:db:8c:bb:e1:68:b0:61:f5:
c0:94:cc:a1:b7:88:44:43:94:f7:8b:e5:25:7a:2a:
e4:d6:8c:56:49:b0:b1:2a:c7:0e:78:b0:6b:d2:40:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197622
Signature Algorithm: sha256WithRSAEncryption
12:0b:c7:6a:15:5a:36:12:d3:88:d9:e7:de:06:80:28:a1:bf:
cd:a3:e7:56:71:a7:fb:d5:a2:2b:14:7a:29:86:05:ba:5d:48:
66:4d:58:17:f1:49:43:40:3f:3f:4f:ef:d7:f2:ea:c8:82:f0:
12:c1:81:10:39:22:d3:0b:16:ad:4f:40:3b:af:26:91:88:5f:
39:8a:41:e4:f3:ce:ef:8c:86:95:4b:43:d7:f1:06:fa:2d:fa:
e3:be:d4:20:87:61:08:37:fc:9e:77:bc:d2:72:9f:06:7b:88:
5d:60:7c:de:d4:89:8a:c3:0a:24:9d:46:0c:9d:ff:77:ac:ff:
32:01:b8:da:f5:fc:02:f4:36:40:34:13:49:a1:14:36:82:72:
b2:58:78:24:1e:71:d7:8e:86:e3:52:49:ff:a9:5e:ab:93:ef:
38:0f:9b:4d:a7:39:fa:cb:da:a8:b5:8a:f4:f1:68:5d:d8:27:
59:46:bc:4a:c0:71:56:76:da:ae:86:80:db:47:42:17:41:fe:
02:ee:7f:fc:5b:ff:19:3f:58:78:4e:d1:ce:10:cb:91:5f:7c:
df:e7:94:3f:71:39:0a:a4:ca:b2:45:a1:dc:50:0b:ce:b4:ae:
9b:b1:f3:99:cf:bd:e5:fe:b9:08:21:e1:f4:4c:8c:ba:c7:3a:
cd:5d:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:07:49 2024 by rpki-client on console-fra.rpki-client.org