Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
File: ktkImo4yjTLW3hbX2iV7gRsFI50.cer (raw, json)
Hash identifier: 72u9EK80n/VsCF2jpn7BPs4cikoAPUE+USVaaLA1Y7E=
Subject key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF4A771A6F17542F7EBE005E128301ADF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 11:37:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210996
AS: 211015
AS: 211077
IP: 31.14.31.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:a7:71:a6:f1:75:42:f7:eb:e0:05:e1:28:30:1a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 11:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:00:ec:af:0a:bb:b9:ec:5c:f8:8c:b1:80:
e8:67:af:12:fd:d2:d6:bb:ce:cc:0d:39:23:02:75:
6e:59:52:eb:64:c7:a9:ed:ab:10:33:3d:c5:9f:39:
4f:20:82:85:13:2c:ba:ae:6a:1f:7d:11:72:7e:b6:
98:42:3d:39:7f:6d:37:3c:85:b7:59:7f:bb:0d:c4:
b8:a3:e0:7b:fa:9f:45:1d:ef:27:2e:c9:6f:06:1a:
dc:84:d6:8d:48:36:3d:f1:d5:9c:e1:00:31:ed:b8:
48:30:fc:06:79:a5:bb:15:69:99:ed:ae:73:6e:c9:
c6:16:d3:e8:62:06:4a:47:ea:76:df:bf:cf:b4:3e:
2c:80:9e:75:9f:bd:da:76:76:c1:09:4d:92:ed:cd:
cd:51:86:f1:b7:fe:1d:88:4c:70:21:77:7e:57:ae:
8b:dc:f4:60:1b:9c:b4:22:f4:5f:ba:51:7d:16:67:
6d:f0:e2:2d:0f:ec:cd:b5:96:a5:ba:43:3e:64:3a:
52:e2:ff:1a:1d:03:a1:09:6d:93:64:39:43:d2:51:
66:85:ac:1e:f1:c3:e0:e5:5c:05:18:08:4f:b9:2a:
2f:08:a7:2f:21:c2:d8:4b:4d:d9:b5:a7:55:3d:59:
34:91:a4:56:44:dc:b9:34:c2:97:9e:7a:b6:d6:e0:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.31.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210996
211015
211077
Signature Algorithm: sha256WithRSAEncryption
48:bc:a2:41:f3:5a:6a:a0:f1:c1:c2:22:47:cd:e4:ab:5b:64:
05:f2:41:9f:44:1e:ee:d6:70:cb:46:5c:15:e7:5b:cb:97:ec:
b4:99:49:bb:f0:c1:39:0e:f3:73:35:ff:3e:31:f4:7f:1f:7f:
01:a7:4b:e9:3e:b6:fb:a6:29:c4:a8:05:6b:55:96:48:81:3c:
34:8b:f7:c9:70:c5:7d:27:37:7c:63:16:b5:45:ca:45:fe:4d:
8b:e8:54:76:e5:51:a6:8c:00:4f:40:dc:c0:6f:f8:e0:33:fa:
24:7a:99:91:0d:e8:93:b8:72:a3:74:85:65:41:2b:c1:05:5a:
21:ff:c5:d0:61:1f:79:12:4b:01:ad:be:fd:ea:9f:91:2b:b9:
63:a5:1a:e4:b3:5f:b6:95:47:34:cd:41:dd:30:38:dc:21:99:
d9:8a:b3:02:c8:4e:96:25:16:13:c0:43:7f:77:94:cc:4d:73:
cb:a3:90:5a:b9:9d:80:ee:72:6e:4d:1f:74:55:a1:90:7d:66:
14:3e:d2:bc:df:f7:cb:9a:fa:b5:0d:4c:55:22:02:21:9a:db:
00:4f:b4:f6:f9:31:6f:7c:0b:26:f8:33:a6:89:77:92:2b:c5:
68:49:76:08:68:c2:cb:1b:6f:ba:ab:8c:91:e9:5a:c9:f3:db:
86:78:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:39:29 2024 by rpki-client on console-fra.rpki-client.org