Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
File: kljqmCx9enWV6Dphx66z12GIlww.cer (raw, json)
Hash identifier: kp+tX2VXTXmmELyZdw/WdUqATYdhpl5nreBuBU2f2Qs=
Subject key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D735E6FE878E7EABE05CB42F63DDAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202439
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:35:e6:fe:87:8e:7e:ab:e0:5c:b4:2f:63:dd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:cc:61:ce:27:7f:d0:ea:82:f9:8a:12:37:
16:2c:69:1f:8f:2f:f6:d9:37:d2:ee:7f:36:1e:c1:
86:f6:04:d3:40:73:46:58:f5:bf:c6:40:92:ee:72:
73:84:ad:de:db:1f:04:ff:9d:23:8a:0d:76:d5:6b:
43:92:bc:46:06:3b:ee:2d:d5:1c:8a:89:40:3b:aa:
49:47:f0:32:fe:58:10:37:63:aa:fa:6c:e0:c4:06:
f6:38:1e:f3:d2:64:95:f7:06:4e:47:e0:22:d1:28:
5d:df:f9:bf:7b:0c:07:8b:65:14:29:70:f0:3b:58:
bd:b7:3c:91:2f:43:ca:7e:79:21:d2:c5:a8:a2:e7:
ee:b4:cf:d5:77:d1:09:0f:83:39:91:fa:dd:0c:04:
17:8a:35:58:0d:cf:d3:05:69:47:1c:89:e9:14:e0:
63:08:03:60:82:62:72:16:1e:ec:68:0f:77:12:b6:
82:be:5d:b1:a0:f9:73:d8:ff:66:a2:55:71:41:17:
8f:63:3e:f1:6c:55:2f:bb:14:4f:7f:67:73:d8:d1:
24:54:19:ca:f0:47:05:0f:89:dc:19:3a:ce:b4:81:
9f:7d:fa:4f:c7:eb:7f:66:d0:3c:02:b0:df:84:6e:
73:8a:f5:c4:2a:b8:2c:5a:88:70:6b:3c:e2:47:b0:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202439
Signature Algorithm: sha256WithRSAEncryption
3a:6a:e0:c3:ca:23:18:3d:e5:57:5b:3c:7e:15:77:3c:a9:b6:
99:6c:20:f9:54:63:90:59:25:d5:07:7d:28:50:49:4f:a7:0d:
5c:e4:c6:f8:8a:85:32:3d:a0:34:a1:d7:9b:cc:87:3c:78:b5:
06:c0:78:ab:13:0a:98:69:f8:8d:92:ed:7c:ff:b4:ba:2e:c8:
e4:2d:30:ad:e2:0b:f3:69:22:34:a2:d8:ca:61:2e:7d:7d:55:
45:e4:83:16:7e:90:43:24:87:f6:47:ab:4d:dc:60:00:e9:4a:
3f:d0:93:d9:de:dd:b4:6e:27:dc:40:d1:34:d9:d9:ed:a2:05:
b5:14:46:8a:c6:22:57:7f:da:65:f7:6b:12:63:a0:6c:5d:59:
ef:51:ce:63:05:67:f9:7c:69:70:80:13:b3:02:8a:21:37:4a:
69:03:8d:8d:21:6e:17:47:7a:66:25:9c:08:ec:c9:24:fd:aa:
01:91:f7:bc:de:37:43:23:6f:45:c3:33:45:46:dd:51:42:2f:
07:23:fe:a2:e2:c2:77:c2:ad:1f:f7:b5:80:95:92:ff:03:a3:
d1:d7:a9:3e:7d:d9:52:30:01:27:1d:cf:3a:8a:ed:c5:37:a2:
e8:15:a5:64:ec:96:4f:37:66:79:9a:f1:da:6c:b2:5e:49:ad:
d7:1d:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:20:50 2025 by rpki-client