Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer
File: cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer (raw, json)
Hash identifier: 1xvp3WePuNIzCdo6PHJ2ceUYpieKgE+cgEyEsxRVD2Q=
Subject key identifier: 72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7936B37105AC294C1DCF471467C7C4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211810
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:6b:37:10:5a:c2:94:c1:dc:f4:71:46:7c:7c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7232a04fc19d91b50d56836793235ece32ac2834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:31:4a:7a:1d:5e:f9:93:cd:5c:a8:60:d8:
18:da:be:38:60:8d:d9:cd:de:84:b3:30:e4:e9:7a:
8c:3f:bb:1d:00:ae:12:b2:97:c8:ff:84:b6:57:29:
9f:03:f2:1e:fd:81:33:c2:5c:e4:63:6e:fa:61:8d:
03:37:1d:f5:51:cd:c1:e8:fe:09:9d:95:5b:36:05:
c8:f5:b1:99:df:bb:79:44:b2:6f:ad:9f:ef:c6:e1:
55:6c:a2:37:a9:26:bb:db:3d:c3:3d:f2:ba:9e:c5:
07:07:26:86:cb:f6:af:d6:3c:f6:48:44:6c:20:7d:
7c:73:fc:a1:dd:68:57:d5:03:83:e5:fe:e9:17:d7:
62:4c:6b:db:08:35:40:6e:ba:d8:d7:4f:40:15:c7:
25:bb:2d:2c:4f:44:4a:58:f1:d9:8d:27:d5:c8:8a:
d6:46:3c:31:6e:62:c1:e6:54:17:92:20:64:fe:c3:
35:34:99:21:08:fc:f0:7f:56:40:d1:52:01:78:fd:
0b:18:13:c9:b4:b6:ac:90:ea:31:44:c8:51:b2:b4:
80:a4:a7:9b:14:dc:b8:38:48:da:17:0d:06:40:40:
8a:8e:60:83:2d:dd:cc:93:9a:ec:86:b9:61:0f:2b:
48:fe:81:35:d9:14:9b:00:fb:a5:a4:7c:d8:1d:87:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211810
Signature Algorithm: sha256WithRSAEncryption
48:16:1c:eb:fa:3f:8d:04:f9:e2:d2:18:00:6b:7d:e2:64:78:
5e:0f:db:7e:70:c1:ef:67:4b:f1:10:ef:cb:9c:73:00:1d:42:
b8:3e:e7:3b:a9:58:85:37:bb:37:95:3a:57:7f:da:e5:78:d2:
b1:83:b7:1f:95:64:8f:d2:2e:c5:34:92:61:6c:c5:f9:33:3d:
4b:2c:aa:82:bb:a6:d8:7a:49:59:39:36:91:be:53:b9:c5:b5:
66:3f:56:84:5c:77:ed:a7:57:a9:11:4a:d4:6f:ce:91:83:03:
b2:24:11:86:fc:81:bf:a3:5e:1e:ee:6c:37:a0:15:b0:ea:bd:
e3:bf:f7:6f:cb:bb:c2:a5:d2:70:8c:e1:e6:4c:d4:34:50:9f:
26:fc:4c:b5:dc:28:9f:de:d5:3e:da:33:0b:44:11:95:60:3e:
ef:53:0c:a7:8d:b1:fb:67:00:bd:80:d6:4d:ce:99:38:88:94:
11:dc:30:dd:d2:56:f2:86:35:02:41:4f:a7:dc:ab:a6:29:0b:
a0:b8:93:39:00:e4:90:49:ce:94:d9:46:0b:ee:99:14:95:9e:
e6:52:c3:d9:5f:86:95:8c:1d:ea:d0:a4:49:3f:84:59:ab:81:
f8:04:07:68:62:19:a5:80:ff:50:40:89:5b:34:9e:85:10:27:
74:00:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:47:37 2024 by rpki-client on console-ams.rpki-client.org