Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.cer
File: kjNDXX6ZSmXnGcriCIj7QrsEdGQ.cer (raw, json)
Hash identifier: uYM1wBZjUFUYowaDStDwYHk4pTAIQFBODzuqrQff0wc=
Subject key identifier: 92:33:43:5D:7E:99:4A:65:E7:19:CA:E2:08:88:FB:42:BB:04:74:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FD5C2DA2FF444DD62549179062DF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/9c9ad6-0740-426f-b780-032fccb48190/1/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/9c9ad6-0740-426f-b780-032fccb48190/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212643
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d5:c2:da:2f:f4:44:dd:62:54:91:79:06:2d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9233435d7e994a65e719cae20888fb42bb047464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:76:1e:87:aa:9b:3e:21:65:36:eb:85:91:
69:2d:9f:bf:de:8a:45:6b:63:f4:98:9b:d7:b6:54:
89:e6:6a:52:ef:fb:09:f1:ab:e1:eb:a7:46:e6:fc:
5b:dc:12:d6:c8:ac:0f:2b:c6:3d:21:a3:0a:2c:f7:
e4:37:96:65:44:f4:01:80:a1:9e:32:1f:53:e2:ef:
fc:bc:71:5d:18:c9:4b:a9:3a:67:e5:6b:25:6d:0d:
7a:aa:77:7f:40:a6:41:61:a2:19:9d:de:26:10:39:
ca:4b:eb:0d:95:cc:a0:e8:af:eb:aa:01:6f:fb:27:
ec:a0:5f:e4:25:2a:0a:db:49:c3:10:43:93:76:d1:
85:70:ce:dd:c2:65:9e:72:20:50:e7:7f:56:6f:08:
69:5b:d9:4e:9f:10:fc:e7:8d:60:20:f7:bb:58:60:
23:f2:1a:23:29:24:4d:56:5b:85:e8:2d:b4:52:9b:
92:61:0b:c8:22:7e:f4:bd:2a:ca:23:e4:2f:1f:0e:
d6:3e:67:9a:ae:22:72:59:08:2c:43:62:26:8e:5f:
93:e0:1f:7d:12:3c:5e:c6:7d:86:58:43:fb:34:c8:
28:ab:aa:9e:dd:fb:ff:85:03:4e:ef:75:00:ef:41:
8e:82:e0:ce:f1:c8:71:19:4b:9e:f8:8f:cd:67:43:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:43:5D:7E:99:4A:65:E7:19:CA:E2:08:88:FB:42:BB:04:74:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9c9ad6-0740-426f-b780-032fccb48190/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9c9ad6-0740-426f-b780-032fccb48190/1/kjNDXX6ZSmXnGcriCIj7QrsEdGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212643
Signature Algorithm: sha256WithRSAEncryption
3c:84:24:b6:9f:a4:28:ed:42:93:b0:11:64:a0:84:8e:b5:e8:
e4:20:89:cf:ba:6e:1a:c0:ea:24:a5:05:7f:ad:5b:81:da:91:
2d:7a:50:2b:69:05:66:1b:12:ec:63:87:76:96:4b:1e:67:22:
5b:bb:75:d6:37:4e:3a:e1:e0:5f:ef:14:84:fa:77:5d:ce:d3:
ff:13:d8:4a:04:7f:bb:22:72:d9:09:7c:30:81:59:41:9e:44:
14:77:00:3b:2c:c7:25:b1:15:14:2b:58:c0:01:28:3e:a6:4e:
20:c6:fb:7f:54:99:75:a1:c1:1b:e2:0d:97:18:dc:01:55:e8:
6b:19:9e:04:a1:8a:ef:22:58:6f:77:b5:46:d4:8a:c2:76:7e:
59:4e:9f:4e:28:72:69:a5:ae:4e:96:5b:57:69:40:be:09:93:
87:65:df:58:e6:41:49:5c:d2:5b:52:1a:b0:53:e0:82:64:b9:
0d:ef:49:c6:4b:6a:8f:61:02:b3:ef:22:2f:d4:4b:bc:bc:56:
be:8a:f1:d6:41:7f:43:30:ff:57:1e:1c:58:b1:a6:6a:c2:6b:
79:31:8b:59:02:e2:96:f1:5d:80:99:a6:e9:8a:37:c6:8c:8c:
c2:71:da:09:79:71:30:41:3a:11:79:b3:e3:27:ca:cf:2e:45:
06:70:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:34:31 2024 by rpki-client on console-ams.rpki-client.org