Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KNJ0JhKXwSKI71LUmzqp9gERVks.cer
File: KNJ0JhKXwSKI71LUmzqp9gERVks.cer (raw, json)
Hash identifier: GExIaC0v8kfeOZ6uT418wbBPgJG3wPM9/ZLgADQzWRM=
Subject key identifier: 28:D2:74:26:12:97:C1:22:88:EF:52:D4:9B:3A:A9:F6:01:11:56:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1FFC2F4767966EB4664CFEE28D4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216208
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1f:fc:2f:47:67:96:6e:b4:66:4c:fe:e2:8d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28d274261297c12288ef52d49b3aa9f60111564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:e0:75:ba:b9:d6:db:92:39:06:d8:6b:1e:
1d:e6:49:4d:76:41:72:77:f5:e6:2b:c6:8e:11:c7:
11:b4:f7:61:bd:e3:00:7b:70:11:66:18:7d:6b:5c:
30:5d:46:02:46:f6:6c:51:8c:90:80:43:1f:93:23:
06:e4:3d:47:04:27:07:61:14:61:e8:72:57:86:03:
6e:3e:6c:4c:c9:61:f1:00:28:ab:42:ab:3e:d5:a8:
dc:cd:e6:02:7f:a9:4f:b6:9c:d8:0d:4c:ea:68:56:
22:f5:50:02:81:5f:01:5f:4a:75:25:36:fd:6d:5e:
fd:f8:10:4d:48:36:39:a4:e2:77:78:c2:f9:79:c9:
f6:18:04:8b:85:0b:af:a5:9a:9c:0a:44:88:ff:5a:
e0:c6:9d:50:05:9c:c3:c2:f5:b0:71:2b:4f:13:00:
4d:99:81:30:00:f8:dc:db:e4:6f:07:52:d5:4a:af:
83:2a:bd:52:90:6f:2a:42:df:81:1e:1b:c2:6f:a9:
e4:57:e3:34:0a:aa:26:54:4e:91:c0:05:3f:a9:fa:
c5:de:df:a0:54:e6:3d:ac:43:77:89:60:5d:79:44:
43:1b:1e:50:7e:22:c4:34:e4:83:db:c6:05:4a:d2:
28:73:c2:e0:5c:7c:ed:82:a5:cc:e1:ed:3a:93:c4:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D2:74:26:12:97:C1:22:88:EF:52:D4:9B:3A:A9:F6:01:11:56:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216208
Signature Algorithm: sha256WithRSAEncryption
03:a5:b2:1a:e8:40:f0:e8:ba:85:c7:6b:94:ba:df:75:ad:f0:
8f:e1:c1:1c:86:c5:65:e7:cd:93:0f:15:19:13:a0:0c:30:0a:
b9:ab:d0:b2:b3:61:e4:77:b8:56:5d:8a:50:2d:2c:9a:45:e7:
3f:ec:2f:4f:e2:f6:53:90:5a:86:cc:06:39:d7:3a:b5:c1:70:
df:41:4c:6f:bc:c2:3b:df:d7:98:56:a4:4e:5c:f7:80:92:9b:
0d:b9:74:4e:24:79:2b:33:ea:8c:58:2b:44:ef:ee:0e:d2:a4:
6b:80:c8:49:0a:cc:d1:48:db:1f:0b:84:84:2b:24:6d:90:0e:
c9:30:2d:5f:39:04:26:2d:28:71:da:b5:2d:79:86:50:70:11:
0f:63:da:93:88:63:b5:5b:5e:79:a7:f5:04:09:59:90:d8:1e:
14:ca:02:c2:6c:d8:c2:fb:06:42:ec:9d:ab:5b:27:b9:bd:65:
cb:a9:cf:6e:fa:8d:7e:4c:53:2e:f6:70:31:ef:f0:57:47:0b:
c5:59:70:6d:ed:a0:4c:8e:2d:bf:f2:c3:db:58:80:42:e1:d3:
3f:dd:35:b4:82:b0:dd:4e:71:2b:43:b0:7b:ca:e3:68:50:3a:
09:74:d0:70:04:1b:8a:eb:86:92:4f:98:2c:9d:d6:c5:f5:43:
c6:41:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:52:36 2024 by rpki-client on console-fra.rpki-client.org