Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KHtQElUXlEJ0oUa7rNZOaRog-gY.cer
File: KHtQElUXlEJ0oUa7rNZOaRog-gY.cer (raw, json)
Hash identifier: nVuwOs/GtUZ3NP85W2wZkkCmQFex4BHzvKlR6WuTHWQ=
Subject key identifier: 28:7B:50:12:55:17:94:42:74:A1:46:BB:AC:D6:4E:69:1A:20:FA:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DD9C8127659A2F3AFF6A3BE14358BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210650
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:9c:81:27:65:9a:2f:3a:ff:6a:3b:e1:43:58:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=287b50125517944274a146bbacd64e691a20fa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:ac:55:76:34:9d:a2:7d:55:9a:a7:89:38:
d9:49:14:38:25:47:8d:03:cf:98:61:5f:2b:d4:c8:
5d:7f:25:df:90:a9:0f:60:65:f1:98:87:ef:b5:6a:
8e:e9:90:b2:0d:c0:a1:d1:29:68:24:53:e7:5c:40:
d3:9f:aa:9d:c2:bf:0d:5e:28:ce:2e:ba:97:2e:5d:
45:63:37:05:45:c7:6a:49:c4:83:4e:12:0a:75:2f:
b2:89:54:df:bc:bc:33:4f:6f:7b:14:19:11:d9:ae:
bb:06:e4:62:f8:70:8f:96:61:6b:fb:be:5f:c3:47:
d5:b3:bf:1f:85:3b:36:12:56:47:aa:84:d6:58:77:
51:e6:8b:be:6e:ff:65:b6:cd:dd:52:9f:ab:72:e2:
73:1a:f2:85:93:0d:9b:82:42:31:eb:39:a4:c8:29:
75:eb:83:c9:84:ff:1a:e6:2e:13:e7:86:8b:8d:21:
07:28:7d:87:00:1a:3a:53:54:85:97:ba:28:90:1b:
39:1b:f3:04:4a:1c:fe:27:7e:6c:2b:ae:a6:be:e6:
f7:f1:29:d4:e0:95:98:3f:34:d0:6e:b8:8e:dd:3d:
87:3b:03:6f:5b:d7:21:9d:50:49:6a:1b:71:ce:6f:
45:2b:48:ed:e2:24:02:cf:e3:82:83:b6:7f:c6:b0:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7B:50:12:55:17:94:42:74:A1:46:BB:AC:D6:4E:69:1A:20:FA:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210650
Signature Algorithm: sha256WithRSAEncryption
5b:2f:56:4c:3b:d8:8b:55:a1:9e:2a:2d:af:57:be:9b:3c:dc:
be:b7:3b:8f:bf:7d:13:b7:91:ce:3f:e0:61:9b:d9:0f:87:55:
af:c8:69:7f:60:44:f8:31:7d:b0:b2:7f:af:ec:ad:8a:79:42:
e7:e3:06:37:7b:13:29:32:ae:a8:54:47:34:48:df:84:4d:2b:
df:a0:3f:d6:70:4b:7e:2c:c3:0a:ce:cb:1e:23:aa:89:c1:c8:
60:c8:5b:9a:da:84:8e:fd:71:f5:6b:a6:8a:44:1d:ea:11:6b:
e0:91:14:5a:a1:49:01:eb:45:de:fd:49:00:ed:c2:89:ac:6f:
f4:e6:d6:69:d8:4a:91:17:ce:ff:99:6f:a3:5f:bd:13:5f:49:
19:f1:40:52:14:df:68:1e:64:be:30:b2:de:38:0d:30:9e:83:
a1:84:a1:29:c5:da:c2:b8:28:71:40:5c:68:1a:6f:2c:90:c7:
ff:fd:e9:85:01:52:a0:81:ae:ec:51:40:98:4b:8a:2f:85:57:
19:1c:d9:ae:90:fd:cf:23:62:07:b7:11:b3:17:cc:b1:ee:dc:
59:ef:83:9d:ea:9a:be:9c:48:65:21:9e:86:12:28:4c:ee:32:
34:00:b7:03:c8:a1:d0:d9:5d:ab:51:8e:e2:0c:e7:55:8d:c0:
34:33:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:02:57 2024 by rpki-client on console-ams.rpki-client.org