Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kh2gU5IfUoNniBiPgvYt1aqXP-k.cer
File: kh2gU5IfUoNniBiPgvYt1aqXP-k.cer (raw, json)
Hash identifier: TIh0HjZW4hsUMTCwuvWgxN2K4tvxo9yZcT1ghCo1tFM=
Subject key identifier: 92:1D:A0:53:92:1F:52:83:67:88:18:8F:82:F6:2D:D5:AA:97:3F:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4923CD269B83152E15ECF61FF40882F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/3e6ea5-0d4e-434f-a6f3-eb346d9ce9e0/1/kh2gU5IfUoNniBiPgvYt1aqXP-k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/3e6ea5-0d4e-434f-a6f3-eb346d9ce9e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3176
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:3c:d2:69:b8:31:52:e1:5e:cf:61:ff:40:88:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=921da053921f52836788188f82f62dd5aa973fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:6e:aa:bd:8c:97:c7:2b:30:b6:9d:74:d2:
27:16:5d:a4:af:f2:a9:73:0f:2d:0d:c7:cf:89:26:
e5:9a:0b:a4:45:c1:9f:83:9e:9f:0b:b4:02:62:e2:
e9:d1:ae:e6:ed:2e:de:b8:75:48:d3:7c:3a:4e:15:
3d:af:8a:32:67:29:d5:43:d4:13:2a:cb:31:3e:98:
a7:94:ad:4e:cf:a1:ed:31:ee:eb:14:ae:2f:80:8f:
a4:26:30:af:db:84:c5:84:6c:4f:0d:aa:2c:24:c3:
c6:47:06:b6:e8:76:a9:39:f5:ef:27:a6:b3:3d:9d:
68:2f:25:07:9b:98:91:01:39:09:1e:b4:0d:62:14:
65:ee:27:7a:10:65:28:06:57:69:e4:15:69:07:e1:
3e:77:53:86:24:e5:ab:8f:5d:07:2a:95:2a:4a:76:
39:84:7f:00:c6:9b:65:01:9f:3d:6e:f6:a8:fe:a4:
8e:de:3f:c1:6e:cc:98:b6:06:a1:c6:23:04:8b:d1:
83:6b:e9:3b:a8:3f:5b:37:d8:2c:37:70:d9:61:c5:
93:03:af:57:ce:87:d6:96:7b:84:a1:2b:8c:44:69:
53:fc:84:1f:49:3a:cd:8f:37:d3:a0:fb:02:c7:bf:
a7:b6:14:32:1a:a0:25:35:d1:a7:8c:a6:fa:7f:50:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1D:A0:53:92:1F:52:83:67:88:18:8F:82:F6:2D:D5:AA:97:3F:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3e6ea5-0d4e-434f-a6f3-eb346d9ce9e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3e6ea5-0d4e-434f-a6f3-eb346d9ce9e0/1/kh2gU5IfUoNniBiPgvYt1aqXP-k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3176
Signature Algorithm: sha256WithRSAEncryption
77:15:5c:a5:fa:ad:f8:a6:8e:f1:22:23:95:ef:5e:24:40:09:
46:0e:6d:4f:75:15:4a:5f:a4:bb:d7:09:85:1c:53:06:b2:f9:
4e:ce:4c:b5:84:52:d1:74:b7:fe:f8:10:6d:18:33:f3:4a:3f:
48:e7:31:c3:54:9d:4a:e9:42:d5:c9:e6:0d:64:fb:6b:f1:40:
b0:e9:f4:1e:d3:62:4f:4c:64:01:db:c8:04:12:10:cf:d4:4a:
03:a3:d4:41:59:e0:42:2d:63:35:9c:fb:62:59:05:c5:6c:ae:
3a:99:22:58:b6:74:b2:eb:9b:ef:7d:8c:01:5b:e1:49:18:cf:
1c:5a:67:d2:c6:73:9b:7e:d2:e9:1c:ec:74:0c:45:b7:a9:89:
46:a0:d9:0a:c5:94:80:50:f7:d2:f9:30:38:19:d6:ee:c1:95:
4d:88:9d:a4:c5:37:de:e5:52:5c:00:44:db:04:f5:e7:0b:79:
00:be:77:c8:7f:a6:0e:93:5d:96:33:ee:ab:e4:2d:66:2d:1f:
63:8f:6a:89:bd:76:43:a6:38:bc:9d:4f:ad:e4:4a:ab:07:1e:
fb:08:c3:09:25:0b:66:63:22:b1:1b:5a:d7:dc:d9:9a:84:95:
6c:2a:b8:03:be:fc:b9:aa:ef:5a:c8:36:75:a5:ab:39:ca:0c:
67:5b:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:39:14 2024 by rpki-client on console-fra.rpki-client.org