Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kSJw6MgQ1eHznUdcGjEdd08XGlY.cer
File: kSJw6MgQ1eHznUdcGjEdd08XGlY.cer (raw, json)
Hash identifier: vIple0T9ZcEh8B7+QZ/QOBXRWjlZwK2umooBg8Gnehg=
Subject key identifier: 91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D640DC24531B7A58CB31017824435E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213105
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:40:dc:24:53:1b:7a:58:cb:31:01:78:24:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=912270e8c810d5e1f39d475c1a311d774f171a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:00:a0:f8:d9:ac:d3:fa:20:cc:91:30:fa:
a3:2b:63:a5:fa:4d:92:95:4a:9d:1b:d7:ed:8e:6d:
ec:bb:ef:d6:58:14:21:8c:17:e2:35:d1:60:6e:23:
e6:b9:77:a1:d1:96:36:78:3a:7d:01:6c:a5:00:ac:
2d:be:77:1f:29:0c:6c:ae:29:5d:93:93:11:c8:15:
b5:7a:2d:ba:97:1f:ba:1f:6c:89:70:26:13:9e:a8:
5a:7a:2d:fb:84:7d:0e:e1:68:dd:80:e4:2d:26:fa:
4b:8e:9a:e6:5b:d6:4f:7f:b4:04:c2:26:87:6e:09:
a8:24:25:8a:bb:02:87:a2:c3:5c:a8:2b:d1:aa:a8:
5f:c1:c1:b9:4e:4f:e5:7f:5a:49:14:6d:61:fd:3d:
b7:62:0a:a2:b9:7e:af:a6:ae:32:f7:eb:48:9a:e4:
28:b5:cc:72:7e:e2:00:03:5f:3d:8a:3c:53:43:77:
16:c9:ad:e6:bf:aa:c8:cb:79:27:5e:13:6e:6b:a0:
6d:fc:b4:2a:51:8c:58:a1:aa:17:db:cb:1c:a9:9f:
79:47:cf:11:3b:a7:0c:72:c4:25:00:98:02:05:c9:
c2:ad:11:ed:75:28:e3:9d:7b:fd:19:19:2a:20:41:
00:51:de:b5:6e:13:87:51:71:6f:00:6d:89:08:8b:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:70:E8:C8:10:D5:E1:F3:9D:47:5C:1A:31:1D:77:4F:17:1A:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c56938-3737-4435-88a3-2c531a4c8f99/1/kSJw6MgQ1eHznUdcGjEdd08XGlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213105
Signature Algorithm: sha256WithRSAEncryption
17:e4:27:3d:5f:bf:79:43:17:36:32:3c:e7:33:9d:0b:e0:ef:
58:3f:2c:7e:29:36:c5:1f:cf:d8:08:ae:96:ee:d2:71:80:9e:
9c:cd:04:fb:b6:5e:71:72:af:43:35:73:cc:a1:f8:c6:bd:6e:
21:96:ae:42:76:c9:a0:13:df:83:ba:ff:cf:6b:39:b0:1c:e0:
f7:c1:9f:92:8c:46:14:6b:da:ee:c8:2b:20:35:c3:73:fe:ad:
17:fb:71:2b:e1:d0:ad:0d:b0:e9:4f:87:34:cf:33:c2:34:d0:
87:74:af:31:87:08:32:80:50:3c:95:23:58:16:1b:a3:47:3a:
cd:de:91:4d:09:98:f0:90:62:2b:fc:37:5a:14:5b:a8:92:ef:
15:cb:d9:2a:b0:94:54:35:c6:60:d7:cb:8f:34:eb:c7:71:66:
e1:1e:9e:66:41:4c:50:48:26:5d:ec:40:e9:29:5f:a3:71:9c:
c9:59:0d:e2:fe:99:58:f9:d6:a7:6f:da:75:d6:d0:e6:9d:e7:
dd:69:97:b2:32:00:02:39:98:c6:8d:a3:d4:91:70:ad:5b:e1:
b1:b7:5c:42:18:5a:9d:6a:61:19:46:7b:53:fa:3b:b7:43:cf:
25:01:e9:64:a1:0a:1f:46:a1:a8:a1:d7:f8:a8:70:b7:01:cf:
c4:48:39:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:09 2025 by rpki-client