Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KSqipVOMsrm-yF0LDi86CEp2KqU.cer
File: KSqipVOMsrm-yF0LDi86CEp2KqU.cer (raw, json)
Hash identifier: JbXcdbHFwZNFH8OG5MkZZ7/ZHC5mx23ITxuyU4NB2ZA=
Subject key identifier: 29:2A:A2:A5:53:8C:B2:B9:BE:C8:5D:0B:0E:2F:3A:08:4A:76:2A:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DCE01CFAF726750075CFA96560E718
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/KSqipVOMsrm-yF0LDi86CEp2KqU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216041
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e0:1c:fa:f7:26:75:00:75:cf:a9:65:60:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=292aa2a5538cb2b9bec85d0b0e2f3a084a762aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:0e:56:5d:0b:cc:4c:c9:7c:41:64:6d:23:
cb:9f:d8:43:e1:ec:c9:49:fd:49:a6:36:d3:2e:ff:
0f:5a:23:c7:ac:9f:cd:01:35:ce:32:b8:12:41:52:
4e:7d:a2:7e:07:3f:07:19:07:5f:fc:2b:f3:f9:07:
33:2b:33:6c:59:b0:e4:be:5b:58:45:72:9b:7a:80:
5f:b9:37:0f:01:b2:95:45:0a:75:b2:ad:93:a4:5b:
0b:3a:64:85:78:b6:28:86:5f:89:d5:f6:01:af:8f:
af:cf:b5:a0:e5:09:eb:b0:fa:fe:d7:47:85:72:1d:
58:5c:2a:cf:0a:85:68:6d:e2:36:d4:e3:c8:84:4f:
f8:30:7d:ab:1c:7d:6e:18:ca:dd:64:8d:46:ce:5e:
af:f0:d7:27:c0:74:11:1a:22:b9:83:81:0a:a6:04:
21:6b:fd:62:3e:91:24:b4:44:ce:68:03:5d:45:b1:
3c:25:7b:a8:b0:3e:e5:20:f5:03:d1:e9:04:b2:15:
47:ef:7d:13:e5:69:ec:d5:44:3e:44:b7:fa:8c:3f:
bf:fe:8c:6f:55:f1:0f:76:89:59:1a:8d:e2:d7:02:
83:cc:d5:0b:ee:8e:d0:c8:bd:91:c4:b6:b4:f5:96:
26:e1:49:7c:04:44:82:f1:4d:bb:3c:a9:8d:00:7a:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:A2:A5:53:8C:B2:B9:BE:C8:5D:0B:0E:2F:3A:08:4A:76:2A:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efaf5c-8e58-43e9-ac1b-d8fae199b11a/1/KSqipVOMsrm-yF0LDi86CEp2KqU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216041
Signature Algorithm: sha256WithRSAEncryption
88:84:bd:a2:b2:d1:54:ba:30:96:55:8f:ff:a9:df:e6:a9:c2:
86:91:cf:fb:64:1b:92:d0:d6:31:ec:ee:61:5a:12:14:d9:31:
ea:d1:40:7c:5b:49:74:e0:14:e0:db:46:2c:9d:f7:eb:05:97:
da:f3:05:85:67:df:13:3d:5e:1e:f5:0d:18:e1:31:60:f7:38:
03:41:56:77:ed:5d:c8:e2:a1:da:b5:10:65:be:2c:d2:39:14:
2a:66:ac:2b:30:89:1a:08:28:30:a4:ee:f3:9b:8c:8e:60:fa:
d1:91:d2:06:e3:37:06:da:3e:ba:cb:23:75:95:73:8f:ec:e9:
f5:87:86:7b:0d:ef:06:a7:9b:6c:98:9e:99:a4:d9:05:6a:be:
fb:84:19:f9:23:f9:71:69:20:33:a0:02:5b:95:53:c4:eb:66:
b9:47:09:6e:34:45:5c:4c:32:93:da:79:f3:aa:aa:df:40:02:
8c:bd:31:34:ba:ae:40:99:3e:43:08:a1:02:a9:5d:b4:52:9a:
f2:ca:42:c6:56:02:0f:09:f0:ff:a1:bb:53:bf:30:1d:80:94:
55:97:32:47:f7:c9:e3:80:cd:54:1d:f5:fa:5d:4b:6a:c0:3b:
78:3b:b2:21:18:57:ab:9c:26:81:86:92:df:fb:13:c2:9d:25:
e1:43:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:52:41 2024 by rpki-client on console-fra.rpki-client.org