Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer
File: KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer (raw, json)
Hash identifier: 2LnBUrNc56EyhmAeQlzvAcHt3WBg2+8S2cnhrWYx3QI=
Subject key identifier: 28:36:24:00:7F:44:DC:AF:56:8C:37:0E:7F:71:F9:50:CB:19:40:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6FB60B46A448F4ACBFF03A1D6115A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198118
IP: 92.42.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:fb:60:b4:6a:44:8f:4a:cb:ff:03:a1:d6:11:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=283624007f44dcaf568c370e7f71f950cb1940ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:6c:8e:de:5d:79:5c:f9:fb:7c:53:42:09:
32:77:91:12:8c:c2:f3:ae:bf:69:01:c9:2d:e4:f2:
21:14:5e:19:ac:ba:f0:16:9d:aa:e6:87:e1:83:52:
31:12:9d:be:fa:9a:f2:30:2a:0e:dc:1a:67:92:a0:
a8:44:7c:91:b8:2d:01:3c:84:94:c9:dc:22:8e:e0:
8c:73:8d:6d:15:11:f0:7e:63:92:a9:c6:fd:62:41:
e6:73:51:6d:bb:ad:02:af:88:56:37:e5:4f:5c:91:
18:a1:68:4b:96:93:a5:97:75:44:96:93:cb:5a:0a:
9d:2c:0b:0d:38:94:48:27:02:56:44:3e:98:ce:1f:
b5:76:ce:32:4d:f4:cc:6a:a0:68:57:6b:46:52:49:
41:7f:c5:c7:90:fd:c0:16:21:b1:9b:91:51:23:65:
52:9e:c0:92:f6:cb:79:a3:c9:c4:f8:77:fb:31:2d:
56:57:c9:90:8f:8e:b5:43:82:fa:91:dc:cf:db:e0:
0e:bc:35:49:ff:1d:14:91:29:b8:1a:1f:cc:18:ee:
f6:db:4b:9b:2d:17:83:32:ea:e5:58:ce:e5:f4:99:
4e:01:87:aa:79:9e:64:df:f5:3c:b7:b2:f7:a4:69:
da:f4:b4:44:23:f5:70:52:e6:d6:1e:cc:b4:a2:0c:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:36:24:00:7F:44:DC:AF:56:8C:37:0E:7F:71:F9:50:CB:19:40:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.7.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198118
Signature Algorithm: sha256WithRSAEncryption
aa:d7:22:26:b2:31:59:cd:09:05:da:ff:43:68:7b:84:32:7b:
7d:f9:cc:fc:04:82:5e:06:38:be:50:fb:46:3a:4d:ca:c7:de:
f6:f5:f4:68:a5:64:51:b7:8d:15:dc:23:b4:e0:a7:27:46:fe:
a0:34:6a:51:6f:04:d8:86:4d:e4:18:12:f3:3f:ec:2f:13:c4:
f0:90:1a:7f:c1:47:8b:0c:cf:83:6a:7d:bd:31:2b:be:ff:3a:
fd:ee:18:e2:e2:67:13:3f:58:92:bc:88:6b:5c:34:71:43:18:
27:9e:57:49:b3:c9:63:b5:0f:85:d6:2f:a7:3f:d2:d9:a4:0d:
69:76:f0:77:5d:4a:93:cd:27:38:74:84:dd:97:84:37:9f:91:
1c:ff:27:f3:84:30:4f:78:b2:77:2a:64:a3:af:ff:92:99:c5:
5e:c5:9d:aa:e4:db:32:35:cc:13:95:ed:3f:2d:c6:6e:da:ad:
50:aa:07:07:dd:62:cb:d3:01:93:31:65:d6:db:b1:4b:b4:ac:
1d:68:60:70:b2:30:ce:0d:5e:b8:9b:dd:71:9c:2a:9f:bd:ed:
30:32:3b:12:9d:fc:70:6b:5e:e9:b3:97:c9:db:cf:85:1a:f0:
3a:d5:33:4e:5a:9a:a3:9e:ec:15:41:c7:90:be:7a:a1:56:27:
3e:8a:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:30 2024 by rpki-client on console-fra.rpki-client.org