Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
File: Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer (raw, json)
Hash identifier: WelWk1lyTNf4W/k3p12VgpSfoMIRL5GFGjrIVlK62VE=
Subject key identifier: 2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727379FEE18E6BED099A120203B93E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44413
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:37:9f:ee:18:e6:be:d0:99:a1:20:20:3b:93:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:c1:80:31:e5:a0:60:7c:52:b8:be:5d:10:
05:73:f8:61:3f:38:1d:32:d6:0a:ca:e1:d4:ab:c8:
1f:21:28:7c:04:fa:17:37:74:6d:fe:80:08:0d:d0:
9f:cc:d2:07:39:82:45:08:cb:60:11:3c:11:57:e8:
92:0a:14:d2:28:c4:c1:59:c4:31:67:16:62:da:36:
2f:9f:23:af:71:7c:5d:90:03:4a:17:a5:f9:f1:73:
5c:57:f2:2a:6f:75:2d:24:6c:2b:c8:82:ba:58:8f:
5f:6a:c0:12:cf:2f:4e:84:42:2f:52:11:29:bd:1a:
c4:4d:54:1f:88:d5:47:77:66:94:ab:14:76:c9:9f:
cd:b0:34:19:35:9d:b8:37:95:74:d2:54:5a:b6:b8:
8f:b5:f5:3b:c6:6e:32:29:41:17:2f:9b:75:8a:f3:
73:26:b6:47:21:01:a1:8c:c1:8e:63:c5:e6:d8:67:
54:26:48:74:29:98:a9:18:97:0e:3e:2a:58:77:6b:
77:e9:c1:29:b2:0f:75:82:a2:bf:71:a9:f3:2f:40:
94:db:db:bb:bc:3e:b1:1b:f5:74:b7:cd:0d:6a:bf:
e1:51:83:f0:1a:53:30:ed:b6:54:6f:9d:29:f4:0b:
cb:b0:60:26:21:50:4a:06:ef:ce:24:ee:41:7f:d1:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44413
Signature Algorithm: sha256WithRSAEncryption
9f:d8:51:13:7a:76:37:e6:64:76:ce:6c:fc:75:e1:45:f7:d2:
99:b2:e4:44:4f:8b:a6:f4:4b:5a:26:19:52:8c:23:c2:ce:fa:
34:ae:9f:e4:7c:44:34:15:4c:8a:d6:01:e4:93:80:8b:09:60:
dd:7f:e2:39:f2:d0:94:38:e4:be:d5:fe:98:53:b5:48:71:ce:
1e:0a:b2:d2:e5:1f:9d:5b:11:4a:3d:8d:db:8d:1c:8a:40:1c:
eb:1c:8b:07:fa:68:06:85:28:cc:1c:78:51:e5:d8:af:d1:67:
57:0b:d9:48:72:2c:43:b9:2c:6d:69:52:25:82:10:42:de:e9:
b5:8d:f1:a3:98:a3:62:a7:46:cd:b4:b6:45:b6:f9:c0:a8:e2:
61:82:4b:fa:5c:4d:6e:41:b8:a6:ee:c1:f5:a2:7d:79:52:d8:
95:ed:60:73:af:29:c9:16:47:5d:85:f4:60:bb:a1:5e:09:e0:
85:b8:92:b0:d7:96:14:18:d2:68:3e:90:cc:dd:f1:90:ed:c3:
e0:69:e4:d7:1c:3f:fb:c2:c1:71:d1:f3:f5:e1:4d:fb:4f:81:
9b:03:39:fb:f9:1f:2a:84:9a:cd:f6:d3:41:4e:9b:77:de:2e:
5d:5d:39:91:9b:0b:5d:13:50:7a:55:c3:ec:cb:e1:b9:e9:05:
a3:d6:75:fb
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzHJzef7hjmvtCZoSAgO5PoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjBiNzcxOWM3MGRkYTU5ZjkzM2E2YzY3MDNjMzFiNjg1MDg5YjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdHBgDHloGB8Uri+XRAFc/hhPzgd
MtYKyuHUq8gfISh8BPoXN3Rt/oAIDdCfzNIHOYJFCMtgETwRV+iSChTSKMTBWcQx
ZxZi2jYvnyOvcXxdkANKF6X58XNcV/Iqb3UtJGwryIK6WI9fasASzy9OhEIvUhEp
vRrETVQfiNVHd2aUqxR2yZ/NsDQZNZ24N5V00lRatriPtfU7xm4yKUEXL5t1ivNz
JrZHIQGhjMGOY8Xm2GdUJkh0KZipGJcOPipYd2t36cEpsg91gqK/canzL0CU29u7
vD6xG/V0t80Nar/hUYPwGlMw7bZUb50p9AvLsGAmIVBKBu/OJO5Bf9GWCwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCsLdxnHDdpZ+TOmxnA8MbaFCJtKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzhhYWE1
NC00MzE1LTQ4ZDQtOWY3YS04OTg0NjU4MmNiYWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvOGFhYTU0
LTQzMTUtNDhkNC05ZjdhLTg5ODQ2NTgyY2JhZC8xL0t3dDNHY2NOMmxuNU02Ykdj
RHd4dG9VSW0wby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCtfTANBgkqhkiG9w0BAQsFAAOCAQEAn9hRE3p2N+Zk
ds5s/HXhRffSmbLkRE+LpvRLWiYZUowjws76NK6f5HxENBVMitYB5JOAiwlg3X/i
OfLQlDjkvtX+mFO1SHHOHgqy0uUfnVsRSj2N240cikAc6xyLB/poBoUozBx4UeXY
r9FnVwvZSHIsQ7ksbWlSJYIQQt7ptY3xo5ijYqdGzbS2Rbb5wKjiYYJL+lxNbkG4
pu7B9aJ9eVLYle1gc68pyRZHXYX0YLuhXgnghbiSsNeWFBjSaD6QzN3xkO3D4Gnk
1xw/+8LBcdHz9eFN+0+BmwM5+/kfKoSazfbTQU6bd94uXV05kZsLXRNQelXD7Mvh
uekFo9Z1+w==
-----END CERTIFICATE-----
Generated at Fri May 3 11:28:47 2024 by rpki-client on console-ams.rpki-client.org