Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer (raw, json)
Hash identifier: 42zwVSIvDUjqZiAa8xTOwDwp+0FdM1umn5ARswJhRe4=
Subject key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3489CC0717169B9A55A185428B45528
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62420
IP: 193.203.26.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9c:c0:71:71:69:b9:a5:5a:18:54:28:b4:55:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:68:8e:85:6d:32:42:de:7e:97:df:2b:b1:
08:51:3d:de:d5:2e:61:61:35:0d:5c:76:a7:a8:c7:
f9:3e:2a:83:73:85:a5:ac:e5:e1:f9:e5:f4:8a:ee:
4f:8b:e6:c2:85:6d:67:20:c2:21:03:b4:69:d5:e1:
e2:38:be:ee:e1:1b:ab:9d:b7:66:8e:81:29:ae:25:
b4:45:15:63:b0:48:f1:62:27:14:d6:3c:25:37:4c:
8b:fa:f9:56:b8:c1:7b:f3:fb:4b:8a:7c:cf:ed:01:
3f:1c:d2:52:ab:d4:6b:31:71:f8:a1:7a:98:57:af:
9a:40:21:26:d9:fb:07:21:ea:c7:18:08:d3:50:d1:
c0:ce:6b:88:63:65:70:37:fa:a8:47:de:80:ac:fc:
42:50:47:30:24:c1:5f:e7:47:f4:d1:20:cd:30:76:
1f:92:3f:c6:55:68:e6:21:ae:23:ff:93:55:1c:3f:
35:10:86:a7:f4:d8:54:f8:83:5b:75:e2:9b:60:20:
3b:43:69:41:d8:8a:0c:05:7a:67:41:13:64:bb:b4:
f9:6f:89:1f:ef:b7:e3:59:af:16:33:07:1b:69:cf:
c2:be:9b:28:8b:ac:53:7c:ca:82:8b:c7:3f:0a:a8:
78:04:bc:79:bc:f3:a9:ff:a9:98:0d:d1:f0:9e:60:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.26.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62420
Signature Algorithm: sha256WithRSAEncryption
20:b9:bf:7f:47:37:e6:8e:b9:84:c6:df:53:d7:99:49:5b:ce:
98:f1:5a:bc:94:50:0a:d0:70:2e:53:44:27:e3:c3:8f:4a:2d:
2b:04:96:ae:ab:0e:55:0d:3e:fa:9f:32:e4:64:05:fd:98:fb:
f7:b4:7b:1d:e5:49:ed:b4:ee:be:21:8a:7b:5a:d3:ae:9b:fd:
cc:34:9c:26:64:9d:92:a1:72:37:5b:10:af:da:a0:f4:dc:be:
99:62:d6:40:e1:4d:6d:4f:66:3a:21:fd:12:bc:3b:d5:f3:5a:
29:77:4a:55:9a:0a:01:33:1f:e5:59:32:dd:c8:19:41:ec:f1:
46:cd:40:0b:0a:01:93:fe:6d:17:74:50:15:c4:d0:04:56:fd:
67:ed:5e:ac:7d:01:fe:a5:ea:c2:97:d2:8f:d5:e9:7e:f3:e3:
d7:11:6d:82:1b:5c:a0:f2:86:bd:e0:07:4b:5d:4d:24:1b:68:
ae:65:94:79:35:d4:e8:4b:db:ec:69:f4:9f:cd:b9:85:35:64:
c7:10:ea:c9:4c:ac:22:47:21:4d:da:84:82:14:e3:cd:fc:6b:
99:6a:3d:68:b8:d2:e8:0d:fe:f0:5a:9c:c5:7f:b0:9c:e7:bb:
94:92:95:55:d4:41:3b:66:04:32:70:44:e0:c5:73:01:bb:77:
75:62:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:00:16 2024 by rpki-client on console-ams.rpki-client.org