Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yhoaYsgLDzM0xdwY3GS3v5eIkBM.cer
File: yhoaYsgLDzM0xdwY3GS3v5eIkBM.cer (raw, json)
Hash identifier: Wm8MsaK1CpUkQiFIKita03nowcJKwSK3P8CA+3BKDNU=
Subject key identifier: CA:1A:1A:62:C8:0B:0F:33:34:C5:DC:18:DC:64:B7:BF:97:88:90:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6499EF28E5408FD85CEFE192766DA5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199266
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9e:f2:8e:54:08:fd:85:ce:fe:19:27:66:da:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca1a1a62c80b0f3334c5dc18dc64b7bf97889013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:0f:11:a4:ee:53:ac:3e:31:a3:f4:dc:6c:
71:c8:1d:4f:ed:d3:49:59:26:44:fe:b3:c8:db:cb:
b4:70:82:ab:71:64:cb:16:aa:2d:5e:60:e5:49:16:
ea:cc:36:e1:33:03:9f:cf:97:3d:a8:62:e8:8a:e9:
2d:bd:a2:d8:d5:1c:0b:ad:b3:a6:ff:c0:b5:2a:e3:
65:b5:55:1b:e6:dd:e8:c6:23:b7:f6:4c:fe:09:95:
b1:64:f1:ae:4f:18:87:9d:d2:89:de:3b:3a:8c:2e:
10:30:ac:0a:ed:b1:dd:d1:d1:a3:5e:8b:75:f9:25:
dc:56:94:3f:aa:0f:58:a3:e8:4e:90:08:35:e1:b4:
4d:6d:38:f3:c5:05:ec:e3:71:41:f5:b4:5b:57:72:
34:9f:3d:12:1d:4d:75:7a:18:2a:bc:58:d5:dc:69:
6a:9d:ec:10:e4:fd:86:50:3b:f3:5c:bd:35:2f:34:
0e:ba:f4:c7:fd:64:ab:82:eb:7f:a5:f9:ec:b6:c5:
09:e5:64:70:79:b6:79:c1:c4:11:79:69:8c:70:da:
1a:cc:cd:3e:9f:65:ed:6d:1b:c2:df:d0:2d:3a:cb:
2e:f6:58:f1:fd:be:67:55:f9:93:99:9f:81:c8:90:
e5:c9:bf:ea:90:53:8d:59:49:3d:9a:2b:82:3c:50:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:1A:62:C8:0B:0F:33:34:C5:DC:18:DC:64:B7:BF:97:88:90:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199266
Signature Algorithm: sha256WithRSAEncryption
b2:02:77:47:fb:17:c4:f9:8d:a9:69:2b:ae:8c:60:c7:97:b2:
51:f8:bd:a1:e1:b4:68:03:00:16:a9:8b:11:48:a3:49:9c:09:
cd:f1:2b:c9:bf:bb:3b:9a:8e:2a:36:b1:73:f0:92:40:fd:35:
f6:0e:4a:60:5f:08:68:c4:7c:f6:93:d9:78:c0:cf:26:0c:71:
2e:7e:b6:8e:92:8a:70:a4:be:03:b8:ee:4f:f4:ce:ab:f2:7f:
1b:36:66:1a:07:17:9d:2b:01:c1:4b:64:bd:f0:db:32:f4:8f:
91:6b:07:36:cf:04:0b:42:03:ef:c2:d4:89:9d:16:97:64:ec:
31:13:d7:4d:32:3b:b0:86:db:a6:a9:77:19:ed:78:b1:92:bb:
47:48:bb:dd:2e:41:1e:7c:e0:dd:0c:9d:10:4f:bf:1d:6a:21:
5d:d2:a6:7a:af:b8:49:06:ac:c6:3c:0d:ca:b8:7a:52:a3:25:
ca:f1:94:a8:9d:ae:dc:60:f1:b3:25:e4:31:ad:06:7e:1d:c4:
22:19:3b:92:56:8b:f7:cb:66:f2:c7:52:2a:4b:6d:af:00:1a:
a6:32:25:5d:62:51:06:e9:f0:08:3e:d3:e3:f3:b1:4f:7c:9a:
db:2b:69:4a:06:84:7b:dd:cb:04:07:27:a5:5a:49:dd:62:57:
3a:49:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:08:35 2024 by rpki-client on console-ams.rpki-client.org