Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
File: kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer (raw, json)
Hash identifier: ILoR9Ici0Jns7YfyITsQRQwR3ohAd4O79zz3zFJ7VfE=
Subject key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6377CFF472EADC5E2DEE75BA5D8C738
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:09:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57782
AS: 202314
AS: 210089
IP: 2001:67c:1190::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:37:7c:ff:47:2e:ad:c5:e2:de:e7:5b:a5:d8:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=926cb33722a3493216283dc80cae0ee9d58874f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:fd:da:dd:9e:76:86:0a:b5:5c:ab:fb:29:
63:c9:b6:20:c4:69:df:8d:4a:ca:47:28:06:ed:e4:
41:82:85:a8:71:62:e0:2f:d5:80:a7:4f:c0:c5:3f:
0b:7b:52:13:61:6d:d7:47:cb:3c:67:36:f6:be:45:
c9:94:61:61:eb:31:f4:f2:ce:bf:e8:f2:4a:5a:e6:
45:b9:22:3a:e6:93:57:ea:cf:5d:9d:ea:59:b0:2d:
a0:06:d0:1a:8d:a5:98:25:84:b5:f5:de:5f:8f:de:
03:30:be:57:fe:27:8d:1f:4f:e3:84:85:aa:05:c8:
0a:9d:72:06:b8:29:e4:61:30:41:40:55:73:35:61:
c0:42:25:d5:0a:b6:27:ea:22:6a:20:44:73:9e:2a:
59:40:22:a8:e8:b6:65:96:4e:7e:b0:c8:4c:70:4e:
a6:7f:d1:3c:c8:ef:57:c5:76:fc:95:ef:4b:34:a3:
ff:48:af:01:b3:d9:e1:c1:55:54:31:23:c5:e4:6b:
9d:0a:16:fb:79:9e:b8:79:c3:cc:7b:fb:c7:71:ab:
08:ce:e2:b1:b4:07:8c:51:ca:15:5a:40:bb:a3:86:
74:a3:0d:89:44:d2:0e:64:5a:08:fc:0b:35:bf:51:
b8:27:6b:f0:83:34:a9:d1:82:45:8c:ca:d8:85:38:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1190::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57782
202314
210089
Signature Algorithm: sha256WithRSAEncryption
40:41:04:76:54:1b:c6:01:35:92:75:e6:ad:8f:d8:02:81:70:
5a:07:d2:34:af:9e:34:5b:fe:e1:24:d5:6a:54:49:8d:d9:49:
1b:a6:25:d5:73:89:d6:5a:6b:ea:02:5a:85:0f:0d:2c:63:9d:
91:85:c7:eb:0c:6b:55:e8:84:c8:06:ed:32:2b:af:12:ab:2d:
bd:62:fd:32:fc:19:f8:9b:e1:12:6c:29:91:f5:f8:11:1b:6e:
fe:51:f4:65:05:e9:be:51:14:6e:79:fa:98:60:6c:4a:1e:e0:
40:53:af:1c:ed:cf:dc:dd:06:67:2e:53:48:7e:d2:d9:c2:d3:
df:c5:23:9a:df:bd:22:cb:4f:a4:19:5d:46:f1:4a:d1:43:9a:
81:75:b3:b5:c2:88:e4:74:a0:b0:46:b1:aa:ff:0d:03:b4:25:
51:f0:c9:79:51:c8:fd:dc:e3:7f:fd:b0:46:29:a7:17:45:fc:
cb:4e:51:82:07:0f:99:aa:03:d5:6d:fd:0f:83:c7:6d:a1:50:
76:85:bf:48:a6:38:58:43:0a:24:b6:77:2a:9c:d3:21:ab:e2:
47:b2:7a:72:0c:b5:f4:4c:ea:c1:b8:1b:21:09:2d:4d:a5:2d:
f4:ef:6f:4f:91:60:d8:ce:1c:dd:68:6d:d3:de:8d:3a:47:3f:
ed:5f:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:39:22 2024 by rpki-client on console-fra.rpki-client.org