Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
File: n-JpKxvOewMnwf51yJKZ4vhiF_w.cer (raw, json)
Hash identifier: Qr3mETvqwbeb9lERBupCJfN4dSj5n/2CnKG2L82a6Lo=
Subject key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191E40E0DD109C9BBA5FFF4A7CDFE56612F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Sep 2024 02:26:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202467
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:0e:0d:d1:09:c9:bb:a5:ff:f4:a7:cd:fe:56:61:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 12 02:26:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:e2:9d:0b:f5:34:9b:45:16:82:f7:40:5e:
eb:18:9e:35:5b:61:b4:d0:3e:f0:08:17:ca:59:a8:
5f:81:f3:9c:fa:d9:90:e8:b8:c7:4f:4a:ff:40:5d:
19:3b:dd:16:63:45:d2:3c:ed:78:96:d7:6f:5b:e7:
74:c7:42:99:6a:1b:c5:d7:dd:13:18:38:de:4c:1c:
7b:f9:d3:10:94:a7:ee:b5:c4:97:77:cd:22:e1:7e:
09:01:a8:98:d4:be:a5:6e:ed:31:a6:32:5b:db:b2:
7f:ac:48:b6:ea:02:78:ed:00:c6:ef:04:04:6a:fc:
2d:16:55:7d:d3:5c:20:de:87:04:c3:04:68:30:04:
38:fa:be:26:a7:b4:71:bb:cf:60:c7:58:20:b4:00:
69:02:34:cb:37:36:ca:ca:3c:8c:b2:23:5f:3a:29:
e0:66:61:5c:33:8e:54:0b:5a:4a:43:50:9f:05:a1:
5c:3e:5f:b2:d4:e7:70:1b:f7:f6:8d:c0:13:b5:26:
58:77:7d:e9:87:2d:7d:e4:da:bb:e4:ad:e4:d8:b9:
cc:8b:30:00:bc:ef:d1:ef:0c:62:62:9e:07:4f:62:
75:82:8f:0a:8f:4d:dd:86:05:2f:f9:d6:a2:05:26:
fe:ba:5b:a2:a9:2c:9d:74:58:bb:0d:c7:e7:03:70:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202467
Signature Algorithm: sha256WithRSAEncryption
93:93:3e:d7:ee:ca:6e:33:e6:d9:64:eb:b9:29:10:3c:38:6f:
4e:9f:80:4a:5b:3a:5a:e3:7d:b6:3c:78:b1:f3:8c:58:47:c6:
df:fa:5b:13:0d:aa:65:73:d1:71:ca:de:1c:6e:83:9c:01:09:
00:06:7b:b5:6a:e9:7d:5d:ad:da:3a:d6:6c:17:7d:e8:5a:1b:
3a:0c:2f:7b:e5:41:51:f8:e1:0b:f7:73:32:3e:1c:23:c8:40:
df:6f:55:fc:52:c3:ab:e5:ac:2a:03:00:2b:6f:d1:89:8a:2f:
b9:ef:5a:c9:9c:a7:09:f6:3e:67:75:24:5e:10:aa:54:e4:7a:
ea:27:f0:f0:75:04:60:32:e8:be:96:f4:b9:c0:8c:47:70:e7:
9b:2e:79:1b:bd:86:01:21:7b:67:b6:ea:96:9f:29:c8:d3:b5:
cb:43:b1:3c:f0:c9:4a:a7:f3:0f:a5:99:ac:ea:7b:72:12:40:
3d:9f:e2:5c:dd:d7:d8:53:a9:b1:41:58:85:56:fc:86:64:de:
86:ce:a7:8c:64:d7:2b:d8:4f:d1:ae:b5:b8:71:21:29:1b:84:
8d:86:09:0c:d0:d9:b0:c9:9f:d8:e4:db:b8:e4:4c:8a:23:37:
1c:88:14:df:96:5f:81:7f:8d:69:b0:46:59:0d:e4:75:87:2b:
0b:eb:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:06:09 2024 by rpki-client on console-fra.rpki-client.org