Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
File: kljqmCx9enWV6Dphx66z12GIlww.cer (raw, json)
Hash identifier: ig59n8eBCsdvxUyHewC70ovZng81P36rlsUtmNGa7nc=
Subject key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B93266CA96369DFE458D867C98B954
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202439
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:32:66:ca:96:36:9d:fe:45:8d:86:7c:98:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:cc:61:ce:27:7f:d0:ea:82:f9:8a:12:37:
16:2c:69:1f:8f:2f:f6:d9:37:d2:ee:7f:36:1e:c1:
86:f6:04:d3:40:73:46:58:f5:bf:c6:40:92:ee:72:
73:84:ad:de:db:1f:04:ff:9d:23:8a:0d:76:d5:6b:
43:92:bc:46:06:3b:ee:2d:d5:1c:8a:89:40:3b:aa:
49:47:f0:32:fe:58:10:37:63:aa:fa:6c:e0:c4:06:
f6:38:1e:f3:d2:64:95:f7:06:4e:47:e0:22:d1:28:
5d:df:f9:bf:7b:0c:07:8b:65:14:29:70:f0:3b:58:
bd:b7:3c:91:2f:43:ca:7e:79:21:d2:c5:a8:a2:e7:
ee:b4:cf:d5:77:d1:09:0f:83:39:91:fa:dd:0c:04:
17:8a:35:58:0d:cf:d3:05:69:47:1c:89:e9:14:e0:
63:08:03:60:82:62:72:16:1e:ec:68:0f:77:12:b6:
82:be:5d:b1:a0:f9:73:d8:ff:66:a2:55:71:41:17:
8f:63:3e:f1:6c:55:2f:bb:14:4f:7f:67:73:d8:d1:
24:54:19:ca:f0:47:05:0f:89:dc:19:3a:ce:b4:81:
9f:7d:fa:4f:c7:eb:7f:66:d0:3c:02:b0:df:84:6e:
73:8a:f5:c4:2a:b8:2c:5a:88:70:6b:3c:e2:47:b0:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202439
Signature Algorithm: sha256WithRSAEncryption
65:1a:2f:be:d3:6d:61:8c:f2:04:4d:3e:45:73:b1:0c:60:e8:
e7:06:f0:8d:46:7f:86:83:a1:e9:c9:fc:2a:e7:a7:53:b9:dd:
46:1c:28:d7:71:c1:43:5c:3f:0e:61:f8:77:a1:ca:f8:ad:17:
bf:8f:75:db:d9:3a:27:70:bc:87:90:6c:ba:c9:ad:e3:3c:c0:
69:17:68:98:28:d0:ee:e2:b5:27:d2:35:5b:43:78:8a:c9:bf:
7e:69:c6:f0:fd:a9:34:da:5a:12:bd:81:67:fa:bf:a0:6a:da:
c8:32:1d:da:fe:c4:61:67:aa:a6:0e:ff:d1:d3:1d:ca:35:18:
34:4c:4e:cd:4f:c7:af:41:bb:80:03:0a:f2:fd:d9:8a:5f:5b:
a5:78:ff:88:a4:22:f5:48:3d:cd:36:2a:e6:f5:20:4d:43:30:
08:f1:d4:18:2a:56:a1:10:43:a6:db:f4:0d:83:b9:9b:55:f0:
6f:5b:2c:8e:ee:dc:84:e7:48:44:1e:13:7c:aa:a8:35:70:e3:
62:a9:e6:e5:9b:e1:dc:2c:33:61:b3:89:2c:d1:08:0d:32:92:
1c:ec:21:89:a2:96:fb:07:b8:b1:2b:e4:26:49:68:31:f3:6b:
f9:5c:0f:26:7d:05:e9:c4:45:37:7f:2c:ea:98:1f:42:68:c5:
77:9e:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:34:34 2024 by rpki-client on console-ams.rpki-client.org