Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
File: ks-z-7RDpLz7jyRvz6f168i5ezE.cer (raw, json)
Hash identifier: +ZX+sUlGndBq8D0EAN03O0Jy/GFOKSH6zld02NyBC+A=
Subject key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D3701375FA140D5FD6443068E30C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213327
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:37:01:37:5f:a1:40:d5:fd:64:43:06:8e:30:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:e1:dc:0d:4e:1a:cf:e2:63:1e:27:1b:1e:
c2:06:14:83:61:d6:15:5f:29:76:42:c4:01:82:7b:
bf:c7:66:84:a0:e4:ff:5b:da:af:87:c4:39:50:89:
30:c1:ec:c0:47:fe:86:cb:a4:32:68:87:07:ad:4b:
ec:80:c9:eb:b9:12:fd:4b:fa:f3:58:38:da:b7:f8:
ee:21:83:bb:44:97:eb:68:16:fb:93:7f:2c:96:af:
77:1b:3e:07:80:f3:e9:e7:0b:a2:4d:a1:9f:a8:44:
a6:01:50:c7:66:04:01:6e:e0:a9:95:8a:27:0a:4b:
20:ae:b1:b6:80:17:56:98:15:04:16:51:2d:e6:55:
e0:bf:2f:ff:1d:38:4f:97:38:7c:fa:cd:d0:43:43:
46:ca:13:38:be:37:ed:16:d7:3a:b6:9f:12:fa:89:
56:d2:8b:7f:1c:6c:9d:f4:af:8a:77:62:7a:5b:ea:
0b:ea:73:9c:b9:ba:d6:86:1c:47:27:af:63:e5:77:
35:6d:78:bb:fd:72:81:b5:d7:c1:81:df:a1:1b:4a:
9f:25:51:ab:7c:ad:16:52:7a:6b:d6:52:cb:0a:2c:
f0:73:17:b4:ed:6c:e2:be:e0:94:b0:fe:7b:99:1b:
02:38:33:00:91:0f:5d:81:f5:f0:cb:45:f4:28:0d:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213327
Signature Algorithm: sha256WithRSAEncryption
a0:dd:30:ac:b5:17:0a:85:15:92:d8:37:9f:08:68:e7:31:1a:
c4:ef:d6:6c:9a:e6:02:f9:fd:c9:73:cf:85:81:8c:4c:60:d2:
64:8e:f4:1f:e3:98:ba:5f:b1:82:7a:df:24:af:cd:11:7c:94:
3e:f8:13:77:74:0c:ad:bc:38:d6:8d:82:6f:f2:7e:d7:65:cf:
4e:34:1f:de:4a:90:81:d0:b4:8f:87:b4:9b:0d:a7:ca:50:07:
87:9a:ba:18:54:d2:da:70:a0:d0:ac:04:76:21:f5:d4:7d:b4:
c3:b7:c1:b1:6f:d1:3b:f1:2c:e0:27:47:b1:c9:30:46:70:6a:
55:9b:4c:f4:13:83:17:30:7f:71:91:ea:93:7e:17:3d:91:7c:
b3:0e:d4:1f:a1:3e:0e:3c:6c:d3:66:ff:a1:b3:df:9d:07:ac:
bb:1e:8d:7b:d9:21:cc:33:11:a9:19:12:98:fa:f1:38:bf:23:
21:24:8e:31:fa:27:88:b6:42:34:63:16:6f:7f:1e:e1:3e:f0:
4e:8a:75:e1:e2:1f:05:14:ec:1f:d4:ca:b0:30:1b:2b:f9:40:
94:c3:ec:46:ed:f5:86:3c:e2:c4:a7:bd:c2:bf:4f:3b:57:55:
a0:e3:6f:22:7a:b1:f0:42:bd:e3:fb:e5:6e:77:b5:98:0a:ec:
dd:6b:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:25 2024 by rpki-client on console-ams.rpki-client.org