Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kSJw6MgQ1eHznUdcGjEdd08XGlY.cer
File: kSJw6MgQ1eHznUdcGjEdd08XGlY.cer (raw, json)
Hash identifier: roNglHZCNf0VpWcV1EmebdAH7Lf+hWRTphtGNw1nqoQ=
Subject key identifier: 91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D356783AF776F21DC9368C0578968
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213105
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:35:67:83:af:77:6f:21:dc:93:68:c0:57:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=912270e8c810d5e1f39d475c1a311d774f171a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:00:a0:f8:d9:ac:d3:fa:20:cc:91:30:fa:
a3:2b:63:a5:fa:4d:92:95:4a:9d:1b:d7:ed:8e:6d:
ec:bb:ef:d6:58:14:21:8c:17:e2:35:d1:60:6e:23:
e6:b9:77:a1:d1:96:36:78:3a:7d:01:6c:a5:00:ac:
2d:be:77:1f:29:0c:6c:ae:29:5d:93:93:11:c8:15:
b5:7a:2d:ba:97:1f:ba:1f:6c:89:70:26:13:9e:a8:
5a:7a:2d:fb:84:7d:0e:e1:68:dd:80:e4:2d:26:fa:
4b:8e:9a:e6:5b:d6:4f:7f:b4:04:c2:26:87:6e:09:
a8:24:25:8a:bb:02:87:a2:c3:5c:a8:2b:d1:aa:a8:
5f:c1:c1:b9:4e:4f:e5:7f:5a:49:14:6d:61:fd:3d:
b7:62:0a:a2:b9:7e:af:a6:ae:32:f7:eb:48:9a:e4:
28:b5:cc:72:7e:e2:00:03:5f:3d:8a:3c:53:43:77:
16:c9:ad:e6:bf:aa:c8:cb:79:27:5e:13:6e:6b:a0:
6d:fc:b4:2a:51:8c:58:a1:aa:17:db:cb:1c:a9:9f:
79:47:cf:11:3b:a7:0c:72:c4:25:00:98:02:05:c9:
c2:ad:11:ed:75:28:e3:9d:7b:fd:19:19:2a:20:41:
00:51:de:b5:6e:13:87:51:71:6f:00:6d:89:08:8b:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213105
Signature Algorithm: sha256WithRSAEncryption
47:fc:09:1a:ee:95:97:0c:51:8f:52:c3:b0:d7:a6:dd:bc:52:
51:b4:2d:4e:93:4c:c7:ae:72:82:fb:8b:09:b4:cf:b7:3e:b1:
32:b2:f4:5a:76:4e:17:3f:90:76:2c:bd:00:c3:d8:b6:b9:78:
74:fa:ac:ba:90:3c:b6:fa:9c:8a:f4:c5:d3:6d:ff:9a:19:ea:
bd:cc:72:0d:42:33:ef:e0:04:70:54:3f:94:b4:03:1f:56:30:
64:44:1a:a6:ac:49:b6:8c:58:a8:42:44:16:8a:f7:a1:3d:35:
4b:36:b8:34:8c:50:3e:22:7c:c8:83:bd:97:9c:99:8e:16:06:
91:36:61:3d:30:e2:2c:66:4c:d2:32:13:e0:aa:10:e1:00:d0:
25:6f:ea:82:4e:c6:cf:e6:10:59:58:9e:a9:6d:83:fa:50:e5:
f4:58:74:da:25:d3:db:4b:cc:ec:fc:79:1e:34:8d:53:49:2b:
76:4e:fe:0c:2b:4b:a5:a9:77:81:b7:82:1d:6d:4a:ce:de:a9:
00:18:37:0c:0f:da:c9:23:93:6a:0a:29:8d:0f:fd:10:b4:12:
da:34:8a:90:f2:70:e2:87:c6:0e:5c:bc:2b:5b:fe:bf:a2:7c:
fe:ab:a7:d2:c5:07:7e:69:28:64:79:14:5d:5b:f9:44:3b:8b:
88:77:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:14:16 2024 by rpki-client on console-fra.rpki-client.org