Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer (raw, json)
Hash identifier: bSxyf22SthUimI/tf3c9pMpYRgaKViwoNGZOvA4tmkQ=
Subject key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190D97B8ACD8B8DF6FCC3FA60DA39A0DB80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jul 2024 08:07:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.138.80.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:7b:8a:cd:8b:8d:f6:fc:c3:fa:60:da:39:a0:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 22 08:07:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:28:3f:e1:36:c6:94:2d:54:23:12:17:d6:
37:ed:ae:a5:8c:4f:a8:0e:17:1e:31:ce:ee:5e:40:
3d:b6:ba:a2:91:a3:47:e8:be:d0:26:dc:9a:1a:0f:
31:91:d4:48:27:70:08:57:92:ed:6c:17:82:24:df:
1b:8c:05:a2:33:0c:a0:ea:62:a4:7a:67:bb:e8:e2:
ca:2d:55:37:0d:cb:9d:d0:8f:4e:0a:8a:7d:cc:0c:
de:a8:29:12:ca:1f:94:df:8a:37:7e:e3:5b:62:0e:
59:8f:3c:df:b4:f9:33:8b:aa:3a:4b:46:f1:7b:0c:
23:06:82:e6:9a:48:34:d5:72:85:d0:16:36:b0:eb:
07:17:28:04:95:66:bd:f3:ed:ae:8d:c1:95:1a:b3:
94:32:bc:6f:0a:86:05:f2:c1:15:4c:60:8b:1c:aa:
8b:32:8d:b9:80:1c:03:a6:3d:ac:3b:84:a1:2a:fd:
f6:5f:75:86:19:dd:40:cf:14:88:9a:1b:5c:72:3f:
b5:d0:f0:06:22:e9:8f:ed:a8:14:dd:de:04:59:1a:
e6:67:c8:d3:46:d9:1a:62:5d:92:35:a0:6c:08:54:
ae:fa:87:b4:db:cf:a3:46:a4:69:04:b9:2f:45:46:
a7:37:db:3a:3e:2f:8a:77:dd:69:a5:1f:c9:91:20:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.80.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2c:5d:b1:38:e4:50:c5:16:85:3a:c2:22:d1:c6:5d:ae:47:
9e:39:86:20:55:4e:d2:2e:3d:9f:bb:06:42:f2:e0:91:94:c4:
63:b9:4b:15:f6:2f:bc:48:a9:67:2f:b2:25:29:f2:06:9f:5d:
1d:e4:33:bf:ae:be:f6:2b:cd:b2:07:0a:a3:3d:6b:68:58:e9:
45:2b:f4:a7:2a:13:43:ff:d4:6f:01:5b:d8:b6:44:28:f9:7f:
93:70:fa:34:7a:e9:34:b5:14:c7:54:82:60:ea:1d:4a:14:be:
73:bc:ea:2a:69:d2:3f:88:a7:a9:58:c4:b0:36:15:fd:8e:74:
d6:96:fd:41:86:9a:a9:5a:3a:ab:78:aa:fd:9d:c5:b1:0d:68:
74:f6:2d:6c:c6:87:da:f4:4a:04:a3:a9:26:6c:ab:86:09:fa:
73:6d:27:a3:95:e8:c9:22:2f:ba:26:d0:1b:1c:8b:e6:45:01:
55:25:82:da:d0:39:12:4c:fe:d1:a5:57:56:d1:71:94:ff:f4:
fc:64:90:38:c8:d0:67:be:6d:94:80:43:68:a4:8a:a9:0e:da:
fa:38:38:d1:86:78:a7:88:ad:2f:4e:dd:e0:07:d1:26:f6:e7:
ca:72:b7:b3:fa:ed:5a:52:bf:2a:9b:e0:6b:ed:8e:52:c8:3d:
33:46:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:00:51 2024 by rpki-client on console-fra.rpki-client.org