Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
File: wIGiJnTcJaqlCFNn4g4HjekGTxI.cer (raw, json)
Hash identifier: bGsDn3myi3sVZKvTupKuHBJ+/LE5tsk9OwJeV0hYi8s=
Subject key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87062B4D6EA443E31AC7962A40DA368
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198691
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:62:b4:d6:ea:44:3e:31:ac:79:62:a4:0d:a3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c081a22674dc25aaa5085367e20e078de9064f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:b6:1d:34:72:c9:33:8d:64:0e:e3:1e:4c:
4b:8d:bd:93:9b:4b:3b:be:17:09:64:7e:ec:54:cd:
97:1c:ec:6e:26:db:39:c0:57:23:f3:e5:61:e8:31:
22:03:0b:7c:e2:5d:a5:94:ec:4f:3b:a9:35:ad:70:
24:6a:2e:19:73:94:e5:09:ae:48:b7:57:7b:52:61:
14:30:30:e2:e8:b4:c2:99:f1:29:43:5a:82:a4:54:
bd:38:02:4e:82:66:82:47:d6:1c:62:71:cb:1d:b5:
c5:03:dc:0f:f1:76:75:4e:b6:00:09:e2:61:47:92:
c2:a6:18:ac:d3:1f:d0:2b:bf:99:19:c3:97:08:e5:
2f:4b:09:48:1a:89:3a:fe:ab:22:a8:db:a2:95:68:
10:ff:cc:9c:69:fe:77:c8:4b:27:c2:c7:1e:62:a9:
43:22:24:d1:d9:5a:d6:22:0b:21:f5:7d:b3:4a:3b:
3e:85:23:bb:b7:90:47:91:44:d3:81:d1:0e:b1:82:
3b:ce:04:48:86:da:ce:2d:d2:eb:45:6d:b6:33:92:
0f:61:82:1c:85:02:43:41:4c:c0:1b:35:27:15:c6:
1a:fe:7e:fa:2a:4c:a3:66:b4:53:7f:e0:4e:1c:80:
29:15:f1:88:cc:f2:f1:1d:1f:7c:18:cd:55:da:63:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198691
Signature Algorithm: sha256WithRSAEncryption
9f:3f:15:fd:0d:92:11:2b:15:98:18:d8:5d:7b:ee:30:1a:af:
6d:7c:23:ee:ea:db:6b:ea:d0:0f:52:cb:58:e7:0d:b6:8d:18:
d8:a6:00:ab:4d:ec:55:ef:ba:81:b5:47:c7:72:54:f1:78:d9:
98:b3:8d:b8:d7:53:c8:58:a8:e3:b6:a3:7d:86:96:9a:4e:5b:
5d:25:57:15:31:37:ab:b6:c2:3a:ed:7f:e6:49:93:4c:3e:8f:
f6:84:16:18:50:14:15:4c:6f:0a:d5:57:87:d4:aa:01:c5:2a:
12:27:8c:b3:c0:32:8f:67:a2:f7:e3:35:04:0e:b3:26:33:67:
d1:29:a0:88:f4:0b:6a:d3:3f:5c:1c:0d:8d:bd:50:d3:fc:ea:
80:cb:64:a4:ef:c3:cc:70:54:e6:3c:b8:90:84:d8:13:72:e4:
57:73:21:23:60:bb:fd:79:72:98:80:bf:f7:d4:4e:b8:93:e8:
23:af:36:a3:9f:dd:d6:e7:07:9c:82:30:8d:7c:aa:50:bc:5d:
40:79:ba:93:0b:7a:3c:93:c1:87:0b:91:22:4c:c4:4e:58:16:
18:33:d2:61:b5:fa:81:f2:b1:f2:0c:6a:3c:76:d9:72:4e:42:
48:bb:88:5e:d3:9f:f0:ed:38:a6:3b:12:d5:5b:62:df:af:1a:
b2:91:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:18:48 2024 by rpki-client on console-ams.rpki-client.org