Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.cer (raw, json)
Hash identifier: QHwO4RbbUIVrSXdk6ls62v3PsUxHsGAbmbNHw9ToYTI=
Subject key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80126148E1F2575ADCDF03C61C95300
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31431
IP: 195.128.228.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:26:14:8e:1f:25:75:ad:cd:f0:3c:61:c9:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:62:29:58:47:ba:4b:e8:c8:0c:0d:e2:c7:
e6:60:99:06:af:45:f6:c3:8e:51:ba:9f:c9:39:d8:
51:70:4c:f0:0d:f6:be:a2:5b:a0:15:ce:fb:d0:32:
57:4d:1d:f3:ef:54:99:05:fe:c3:5d:b5:49:dc:1c:
81:9a:96:cf:eb:72:f6:e4:fe:3a:bd:32:33:e1:d3:
33:d7:e8:72:0d:98:56:4a:3b:c6:e1:b1:f4:f0:c7:
e3:89:6c:f8:0d:ae:09:bc:84:67:c4:ce:77:37:f8:
e9:b5:f0:97:5a:da:7d:56:c3:56:bf:42:a9:f4:f8:
4f:eb:81:09:40:cb:d5:0f:46:05:5a:ba:f1:3e:a1:
e4:56:c5:2e:f7:19:ba:06:d8:9a:96:f6:22:23:11:
98:4b:ad:9e:64:49:c6:9c:d4:c6:2c:b6:2d:e3:6c:
43:d6:b4:88:05:91:0a:ac:d2:57:bd:7c:97:da:b5:
a6:0f:f5:70:06:34:9c:65:5c:68:52:87:00:d4:7f:
71:bc:59:a2:0a:69:4a:bd:79:05:b7:bd:73:eb:27:
09:7f:ff:97:1e:dd:7f:ec:27:bd:c3:ba:d8:48:f3:
cd:9a:13:98:24:bd:01:d7:4e:16:b5:b2:c4:23:d7:
45:0d:64:ab:9d:11:68:68:a8:2e:df:ca:35:79:04:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.228.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31431
Signature Algorithm: sha256WithRSAEncryption
69:5e:25:c2:c1:c3:18:f6:73:86:cc:dc:54:a5:7d:ec:7f:10:
d5:a5:f3:e3:08:a2:0e:d2:48:a0:fd:e6:9d:5b:e3:5c:a9:2b:
92:39:14:41:2b:86:ff:fd:53:23:4a:bb:51:0e:57:d9:5e:c9:
e2:f0:5f:82:6b:29:d3:29:c6:a7:a5:1f:ce:6f:d2:6d:bc:1f:
ce:13:a8:c3:71:81:43:7c:03:d3:ee:05:a9:bd:29:d8:a7:e0:
b5:fc:1b:69:48:a3:79:8e:df:a3:90:6e:8c:17:f8:a9:27:d1:
f5:a6:65:4e:71:b9:a3:06:d9:8c:3a:aa:4e:39:f2:0e:f4:21:
70:d8:36:99:55:5e:ce:01:74:a4:1d:34:0f:15:38:b5:dd:c5:
e9:e0:22:f5:f0:c5:f2:94:3f:d1:7f:3f:f8:ae:58:b3:61:8d:
74:ca:f3:48:38:41:e4:cb:ef:28:b5:30:08:23:59:67:a4:8d:
73:8f:ba:d5:55:f7:b3:b1:a4:27:6c:e8:f9:5d:60:fb:76:bb:
ea:08:d4:1a:d3:e9:0c:bc:01:68:15:18:c6:c9:dd:87:71:b9:
b9:91:9e:58:40:36:a7:11:e2:e1:88:0d:21:4c:cc:c8:16:5b:
bc:90:ce:3c:24:4a:4f:c1:36:33:d1:9b:b0:31:62:2a:b8:b8:
31:f2:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:38 2024 by rpki-client on console-fra.rpki-client.org