Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer (raw, json)
Hash identifier: b2kALomdxHYu7De/WFIzpCC/m2akNQT2qiM26S8+LnU=
Subject key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2320966F94FE478AEA9FCEB08F329
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213993
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:09:66:f9:4f:e4:78:ae:a9:fc:eb:08:f3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28693b0056de87d84baccdd805d0365fac60f67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:93:3b:9c:f7:6c:5d:b9:dd:d1:47:3b:ee:
7c:5e:53:e7:f4:42:63:51:6b:d4:bc:8b:2f:be:89:
38:64:4c:5f:9b:97:58:d6:7d:ea:09:1d:0a:2f:ce:
f0:b2:7f:73:b0:b9:5e:82:cb:5f:d8:95:d4:13:38:
2d:87:2f:b2:5f:d8:30:69:3f:29:dc:1b:b4:92:32:
62:bd:ab:03:50:d8:0d:2f:83:3b:5f:85:ed:fe:76:
4d:5a:ee:6e:11:05:dd:0e:2c:b1:e7:31:3b:67:f2:
be:0c:48:9e:c0:62:82:b6:f2:d6:6b:30:1c:78:5a:
8e:47:a5:db:85:02:60:36:1e:54:b8:4b:bf:65:76:
01:fe:0e:a2:c7:c8:e5:0e:1c:70:7c:bd:8f:80:7b:
c8:06:95:ea:4e:24:1a:dd:28:9a:f9:c8:a9:41:70:
33:4f:62:35:be:36:46:f7:be:ee:32:73:49:5d:86:
25:c3:52:87:d3:eb:dd:34:39:fd:54:72:71:a9:ca:
90:be:b5:a2:29:93:d3:07:34:42:bb:61:6b:43:cd:
24:cc:9e:57:84:a6:8f:6d:3c:18:ed:58:c2:fc:e0:
68:73:63:52:b6:65:e8:4d:9a:c9:a5:fb:92:d1:97:
df:64:4d:b7:d2:d1:ec:d6:10:e2:de:09:2e:45:4c:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213993
Signature Algorithm: sha256WithRSAEncryption
55:2d:02:dd:9b:3e:9d:65:56:ac:e0:83:d7:4f:17:ef:70:fd:
d6:f7:83:41:f0:c1:d9:42:76:9b:52:de:40:04:00:7b:fe:cf:
a7:6e:92:1f:8a:62:0b:4a:2c:93:e3:0e:9c:a9:72:ba:d9:8e:
da:37:66:3d:ac:1b:e1:11:81:b1:84:0c:cc:cf:d0:a4:44:ec:
05:b8:f7:66:0e:75:6c:bc:79:f5:72:5b:59:04:22:54:f0:98:
b6:c6:c7:7e:61:5b:bb:74:bd:c3:61:a0:76:19:b1:fe:26:62:
c6:41:8e:aa:74:f3:d8:45:0c:cf:1b:3d:bd:e8:d9:42:06:1b:
87:72:70:02:31:8d:f7:19:76:22:c7:63:6c:e1:d1:50:d1:48:
6e:04:41:fa:44:bf:72:94:6d:10:d2:bd:7e:93:09:eb:6c:bc:
96:83:12:3d:63:66:95:45:1d:33:44:de:70:00:ec:54:c6:90:
9e:05:db:33:1c:1e:fb:be:0f:2b:75:87:32:bf:54:b1:b9:b3:
83:9e:aa:31:e3:41:bb:bd:46:aa:5b:30:ec:b5:d8:33:52:be:
eb:4d:55:62:74:4d:99:78:ea:ca:42:98:db:95:05:97:aa:53:
8f:28:b3:98:55:c7:33:d5:a9:99:47:20:8b:cd:db:1d:94:45:
4e:8f:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:11 2025 by rpki-client