Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
File: k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer (raw, json)
Hash identifier: Fh4Osf+DSM7cx2UsLDTP6OA4h1eIQia9ps+CKEgEm1A=
Subject key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B56D24C66B3689A59F7E855D2C6A16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35112
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6d:24:c6:6b:36:89:a5:9f:7e:85:5d:2c:6a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:98:70:2b:b9:23:bd:6f:ca:15:e0:a5:ef:
19:bb:28:58:27:71:f5:c0:15:76:cc:d5:c2:87:54:
fd:ac:b8:3f:fa:5c:fa:29:0a:8d:d6:f7:73:a3:8f:
59:9c:f0:5c:98:ec:60:14:cb:e9:6e:3c:69:70:a3:
2f:52:91:8d:1e:29:71:eb:a1:0f:04:1f:3f:15:bd:
ad:27:17:79:34:02:7e:3d:dc:d0:55:a2:7d:58:06:
7c:e9:d7:70:a9:a3:08:8b:7b:f7:f4:a4:b5:40:84:
c0:0c:98:20:3c:78:d6:3d:a0:89:b7:78:e4:d7:fa:
ca:5a:25:07:c1:e1:55:f2:d1:d0:a7:f7:db:19:89:
2f:6f:a9:87:77:28:65:55:07:e7:47:14:c0:17:55:
17:f8:98:2c:0a:1e:23:70:0f:cc:a5:50:2e:47:f5:
e3:79:2d:7f:34:58:aa:9a:7b:63:d0:dd:e4:9b:83:
69:32:14:dc:e3:5b:31:a9:4e:b8:99:22:cc:30:7b:
f7:af:36:d2:80:62:25:63:85:bb:d5:85:71:89:d7:
75:be:81:f0:22:43:66:5d:42:1e:d2:bd:15:c6:54:
96:2e:99:06:4a:02:0c:57:69:62:27:9b:a2:6d:cb:
46:a1:ab:50:ce:8a:9d:db:c5:1c:30:1d:1b:7e:46:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35112
Signature Algorithm: sha256WithRSAEncryption
69:5a:d4:17:93:6e:29:12:dc:63:38:5e:e4:e8:ba:c5:be:11:
cb:79:aa:9e:6c:77:41:55:f5:1d:4b:8d:ad:87:e7:37:55:91:
cb:4e:50:52:c9:25:02:0f:e9:be:ac:00:89:9e:d4:8c:8c:2a:
d0:74:b7:e7:5a:bf:42:78:9b:5c:9e:8b:e4:b0:ce:b2:3e:9b:
63:e4:d7:53:79:09:0e:c3:24:01:b2:fe:53:7e:02:c4:b9:a8:
f6:2d:26:39:6f:6c:6a:30:56:75:5b:ad:d8:a0:c3:43:05:c2:
46:6d:c8:a1:ca:11:7c:30:3b:73:56:18:93:53:95:0b:ef:48:
1f:cf:9c:c1:ea:68:58:48:28:1f:cc:09:73:12:cb:96:b4:06:
d6:7c:89:19:76:15:f4:ed:67:54:7f:d1:d7:51:df:23:40:fe:
b4:e6:63:b1:49:b1:97:4c:6d:de:4b:3e:62:49:2b:cf:1f:f6:
ab:f9:89:f8:e3:e8:97:5f:3d:5b:66:20:92:63:82:57:3a:49:
de:88:30:0e:0d:4d:54:73:37:b5:5a:e2:54:ac:cb:ea:ee:f7:
26:68:ba:0f:21:b5:b9:32:cc:b9:70:b7:eb:05:1c:0d:d9:f8:
62:b6:cd:fd:80:1c:13:f4:3c:7c:0c:be:36:29:cc:dd:df:0e:
1a:11:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:08 2025 by rpki-client