Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer
File: vxfVoihiEhe4cYVdRhG8pGTg5iA.cer (raw, json)
Hash identifier: O4wO1y43R27zBvFxsU8JkuBfvRnMer59KrUQnzHJJIQ=
Subject key identifier: BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190323E3C4BE4644B3CE137E8AE30FF687D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Jun 2024 20:44:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214929
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:32:3e:3c:4b:e4:64:4b:3c:e1:37:e8:ae:30:ff:68:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 19 20:44:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf17d5a228621217b871855d4611bca464e0e620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:39:40:4d:fd:27:5a:f7:1a:69:cf:12:82:
4e:7d:45:3b:59:aa:9c:e3:92:cb:83:7e:4d:e5:8d:
26:c2:db:f9:8f:a9:a8:82:72:42:80:58:b0:e6:ce:
48:f4:27:20:09:19:b2:ee:7c:c6:c6:4a:91:15:5d:
ba:fa:18:40:0d:de:0b:b9:bc:8e:5e:e8:cf:10:16:
d9:40:72:20:2f:be:a1:07:f6:c0:6e:56:0d:96:2b:
ee:e5:29:1d:25:e0:d3:f7:de:23:eb:b1:ab:ce:b6:
85:ae:27:e5:b4:cb:18:be:45:df:1a:29:73:46:8c:
12:e7:90:16:1b:ae:27:f7:9c:9b:b6:70:92:9b:2a:
d3:51:e7:47:cb:29:90:a3:63:13:db:c1:5b:5c:be:
08:dd:b3:0b:47:93:3f:dc:6b:72:2d:95:0d:3e:93:
87:e4:4c:60:5f:1d:47:4a:40:9d:54:b3:25:a2:46:
6c:c1:92:d9:d0:10:75:fe:80:5a:94:f8:1f:d7:d1:
6f:d2:07:85:2a:2f:15:ab:5c:c5:97:72:7d:c5:aa:
8d:8b:e4:a6:82:db:ce:ff:d4:b0:06:91:96:a1:e7:
7b:09:25:29:72:3c:d6:ac:c1:80:02:ac:0e:21:f9:
33:41:38:95:ec:40:33:06:9b:6f:7e:08:20:1a:91:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214929
Signature Algorithm: sha256WithRSAEncryption
aa:28:a8:0a:e7:1b:ee:b1:11:aa:bd:31:1c:40:59:59:94:84:
2b:94:c7:c8:df:45:c7:e2:a8:68:1d:1b:46:b4:00:3f:6f:ff:
e9:63:90:20:04:a6:f3:da:5d:42:23:28:0e:79:2d:28:fe:58:
a2:d6:f5:e0:e1:71:86:dd:cb:76:a1:25:8a:be:c6:57:b6:b4:
e3:2a:a4:bd:b7:d3:42:0a:41:43:74:0e:24:79:18:c7:d9:8a:
a5:a5:51:59:11:4f:34:dc:25:19:25:9e:72:79:4c:58:78:a2:
1d:43:31:dd:5c:8f:a8:e6:ef:a8:76:58:92:92:27:aa:01:d1:
ed:ed:be:b7:ef:43:d2:06:1f:37:30:62:a2:e9:71:88:15:2b:
27:4d:5f:bf:5f:ae:df:63:4e:ec:d8:c5:b0:88:55:31:2d:9d:
97:e2:1c:6b:ab:c2:c2:2c:65:b3:ea:ce:5c:3a:29:19:00:7c:
2d:49:b0:eb:89:05:a1:b2:7c:db:30:a0:0b:5f:39:48:62:bb:
45:d9:c9:b2:01:f9:44:33:9a:26:ab:16:96:9b:b0:10:77:34:
5c:dc:ff:45:41:23:31:d8:8d:17:2b:36:f3:2b:39:06:f2:a0:
5c:b3:94:1f:6e:64:9e:e2:67:a5:4b:aa:ae:b5:ce:93:d5:27:
d9:32:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:31 2024 by rpki-client on console-fra.rpki-client.org