Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer
File: CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer (raw, json)
Hash identifier: 3nBYjzgdGGlry4K5MFG9c3zzaOYdPM2H19mOm4SLi6k=
Subject key identifier: 0A:84:FE:2B:35:0F:74:84:3F:CD:98:AE:DE:0C:B4:FC:A2:2A:4C:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191C26C6835461D6AEF9D3F44BABC97805C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
caRepository: rsync://repo.rpki.space/repo/Netiface/0/
Notify URL: https://repo.rpki.space/rrdp/notification.xml
Certificate not before: Thu 05 Sep 2024 13:42:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60223
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c2:6c:68:35:46:1d:6a:ef:9d:3f:44:ba:bc:97:80:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 5 13:42:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a84fe2b350f74843fcd98aede0cb4fca22a4cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:14:1b:be:27:df:8c:01:e8:03:c2:ca:06:
96:7e:5d:70:a0:7f:f4:76:e5:b4:53:8c:c4:46:12:
f9:49:69:17:82:82:f3:2b:0e:42:b0:d6:3e:65:b7:
1c:9e:f3:7b:3c:7a:31:1e:3e:63:47:68:b4:d2:3d:
54:a3:02:fe:eb:64:3b:c9:b4:dc:8e:6e:9c:f6:3a:
97:7d:c7:b8:e1:1e:ad:dc:62:be:3a:a8:67:3c:61:
d6:9b:3e:82:3f:e1:cb:8d:61:4b:6d:c5:4c:55:da:
39:7f:82:83:d1:cd:00:79:52:ef:4a:01:8f:53:b5:
5f:51:54:fc:53:0e:26:df:40:d8:61:58:34:e9:f3:
5f:09:e4:f5:45:3d:82:74:e1:18:62:d8:f2:9e:4e:
80:97:20:34:ba:a1:66:7e:c0:19:1a:88:e0:eb:09:
dd:c6:3e:33:b8:e7:67:d2:69:c4:f7:2a:76:39:97:
a0:04:06:2e:0e:99:83:c5:ec:e7:1f:2e:3e:8f:1c:
92:36:e6:67:76:ab:8b:c3:a2:c0:79:77:4c:31:8d:
b6:89:33:21:7c:3b:ab:a8:41:ef:8f:07:a4:2a:6b:
8f:e9:0b:67:ec:19:6e:42:0d:d2:83:b0:0e:df:70:
85:2d:3f:3e:77:37:12:f9:b4:d2:98:65:41:64:4e:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:FE:2B:35:0F:74:84:3F:CD:98:AE:DE:0C:B4:FC:A2:2A:4C:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://repo.rpki.space/repo/Netiface/0/
RPKI Manifest - URI:rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60223
Signature Algorithm: sha256WithRSAEncryption
5a:9f:b7:14:03:f3:5d:75:6c:a4:b5:66:ea:e7:41:78:1d:ba:
01:7f:4c:5f:3b:e7:f1:f6:a6:da:67:54:8e:86:af:de:b3:4b:
25:d6:d5:98:07:da:0b:62:c3:32:68:0f:88:c2:b5:0f:77:e4:
bd:cb:49:08:24:47:f8:6e:80:d6:ed:51:35:d6:1a:f4:c2:c5:
89:69:d6:94:83:d4:c8:f0:57:77:95:42:59:bb:c7:c1:32:fb:
f1:76:cb:e8:f4:16:dd:2c:69:de:9a:f2:24:95:a9:45:62:39:
02:69:27:03:e8:5a:4b:0a:0a:5d:42:da:fd:02:86:27:20:b7:
65:6d:73:60:e7:b7:f5:20:67:e9:26:1b:9a:4d:92:3a:c3:8f:
70:be:36:8a:f9:c1:2c:a0:9e:39:ff:1f:1f:fb:91:d3:9b:b1:
5f:7d:a9:6b:db:ff:34:44:e6:fe:8e:38:40:59:6f:bd:f6:b1:
d5:54:17:7b:c3:8f:d3:d7:a5:78:45:81:59:9b:f1:1e:9f:d8:
31:bd:42:c5:27:b5:ef:19:62:29:13:ab:a0:b9:62:51:b1:45:
36:95:04:28:52:b4:46:f6:99:83:0d:4a:02:81:74:3a:b8:f2:
d6:88:c9:56:3f:03:33:7b:d4:05:ab:d9:96:f2:5d:75:de:46:
91:3a:08:a5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZHCbGg1Rh1q750/RLq8l4BcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTA1MTM0MjUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTg0ZmUyYjM1MGY3NDg0M2ZjZDk4YWVkZTBjYjRmY2EyMmE0Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWYUG74n34wB6APCygaWfl1woH/0
duW0U4zERhL5SWkXgoLzKw5CsNY+ZbccnvN7PHoxHj5jR2i00j1UowL+62Q7ybTc
jm6c9jqXfce44R6t3GK+OqhnPGHWmz6CP+HLjWFLbcVMVdo5f4KD0c0AeVLvSgGP
U7VfUVT8Uw4m30DYYVg06fNfCeT1RT2CdOEYYtjynk6AlyA0uqFmfsAZGojg6wnd
xj4zuOdn0mnE9yp2OZegBAYuDpmDxeznHy4+jxySNuZndquLw6LAeXdMMY22iTMh
fDurqEHvjwekKmuP6Qtn7BluQg3Sg7AO33CFLT8+dzcS+bTSmGVBZE46PQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFAqE/is1D3SEP82Yrt4MtPyiKkzUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgeMGCCsGAQUFBwELBIHWMIHTMDQGCCsGAQUFBzAFhihyc3lu
YzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzAvMGAGCCsGAQUFBzAK
hlRyc3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzAvMEE4NEZF
MkIzNTBGNzQ4NDNGQ0Q5OEFFREUwQ0I0RkNBMjJBNENENC5tZnQwOQYIKwYBBQUH
MA2GLWh0dHBzOi8vcmVwby5ycGtpLnNwYWNlL3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA
6z8wDQYJKoZIhvcNAQELBQADggEBAFqftxQD8111bKS1ZurnQXgdugF/TF875/H2
ptpnVI6Gr96zSyXW1ZgH2gtiwzJoD4jCtQ935L3LSQgkR/hugNbtUTXWGvTCxYlp
1pSD1MjwV3eVQlm7x8Ey+/F2y+j0Ft0sad6a8iSVqUViOQJpJwPoWksKCl1C2v0C
hicgt2Vtc2Dnt/UgZ+kmG5pNkjrDj3C+Nor5wSygnjn/Hx/7kdObsV99qWvb/zRE
5v6OOEBZb732sdVUF3vDj9PXpXhFgVmb8R6f2DG9QsUnte8ZYikTq6C5YlGxRTaV
BChStEb2mYMNSgKBdDq48taIyVY/AzN71AWr2ZbyXXXeRpE6CKU=
-----END CERTIFICATE-----
Generated at Sat Sep 7 20:59:24 2024 by rpki-client on console-fra.rpki-client.org