Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.cer (raw, json)
Hash identifier: xqrwyGW+jUqr9D1B6ReCbZpiA6ZCrQ1DWl1yz9e1GZ4=
Subject key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F14427EEF75EC612D28DC621E0426B336
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Apr 2024 07:57:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8684
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:42:7e:ef:75:ec:61:2d:28:dc:62:1e:04:26:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 25 07:57:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:46:58:59:e2:3e:8a:26:f4:7e:9e:0c:ed:
48:5e:e1:4a:c2:63:ca:34:70:1f:e3:8e:86:52:6a:
5b:66:a9:ad:e9:7e:73:3c:d1:c6:e1:fd:0b:2a:83:
8e:2f:1c:36:61:e9:31:9b:0b:73:da:e9:74:06:0e:
d8:e9:85:bb:f9:f2:23:e9:ce:1a:16:4e:f7:31:02:
a2:53:70:ef:f0:78:ad:94:1e:45:f8:60:79:e3:8e:
7a:e2:be:4b:c3:33:5c:ab:36:a3:65:bd:44:62:71:
8c:48:84:c7:c8:fe:f8:5b:59:2d:27:5c:bb:4d:83:
b7:ba:ec:f9:42:28:a9:e3:83:84:24:e3:46:e2:00:
7d:1c:0b:ac:28:54:3a:f2:bc:5e:58:77:72:12:9a:
d2:72:c4:80:01:e0:3a:f0:3a:9a:f4:12:18:4b:68:
5c:aa:c5:b2:3b:3d:be:f4:e8:58:df:04:6b:42:57:
8f:a2:8e:f4:a2:c9:1f:a0:83:91:05:fd:e5:4c:8f:
4f:89:d3:4e:6c:5a:8a:46:03:cc:d0:04:ae:b6:98:
7a:7a:14:a6:83:6a:c1:e7:46:78:5d:22:ff:58:83:
06:7e:34:79:d3:94:fb:36:c1:05:ac:b1:bc:9f:2b:
43:7c:10:2d:96:f8:bb:d5:8f:b1:e9:2f:34:27:ee:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8684
Signature Algorithm: sha256WithRSAEncryption
78:1c:bd:f1:3e:a5:43:17:ec:91:87:8b:33:6b:49:fb:7c:b3:
a9:78:4c:d7:14:75:52:fe:06:ef:c2:de:3e:a7:78:a0:e2:cc:
50:f0:4a:86:c7:50:d1:7e:8b:e8:79:db:31:86:e2:ab:42:24:
ae:1c:82:3e:e7:59:bd:71:8b:51:35:11:10:43:ff:79:af:2d:
d4:bc:36:15:60:57:92:b2:b3:ce:ec:b8:26:72:61:73:53:b7:
e1:74:c4:69:a2:8f:7b:12:16:a5:60:92:c7:71:fb:e7:51:97:
20:c0:53:ae:dc:16:13:26:ae:76:ea:9f:a4:31:25:ed:29:11:
99:82:9c:98:b8:c7:a5:f6:2e:3d:9b:ca:48:ba:ea:81:e2:e5:
5a:34:5d:df:27:60:5b:a3:a5:bc:24:bc:13:dc:9a:c6:8b:ed:
90:b5:6c:7d:8f:5b:c5:d3:4c:d1:fd:c8:0f:86:41:67:13:28:
c1:47:aa:5f:30:3f:0f:80:30:9a:85:97:02:4e:c9:5a:4e:65:
0a:4f:ba:f7:02:b8:30:39:d9:cf:29:78:2c:d3:1c:18:ed:c8:
4b:19:93:d7:61:ab:80:da:86:ee:40:33:a9:f7:a3:c8:59:7f:
c3:47:64:56:ca:26:48:cf:3d:88:6e:3f:0b:ea:53:ff:31:90:
88:51:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:13:38 2024 by rpki-client on console-ams.rpki-client.org