Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer
File: njXiGCQ9GwYp16OD6v3CBROKGUs.cer (raw, json)
Hash identifier: Au4aY7JciT+ylNC3rysRMkqPxiPOLbnjjIok4+/hdok=
Subject key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EA5214133F0EB733842C6F6FB05DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31547
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a5:21:41:33:f0:eb:73:38:42:c6:f6:fb:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e35e218243d1b0629d7a383eafdc205138a194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:1a:6b:92:61:3e:f1:ff:fe:4b:66:ae:d9:
c6:d2:08:38:17:cc:ca:50:12:c5:02:b1:24:af:32:
c0:9c:54:6a:ab:5e:70:b4:9f:80:fe:6b:e9:97:5a:
07:3d:eb:85:19:64:e4:24:12:a3:a5:61:29:bb:91:
49:6a:af:29:9b:c3:b4:e2:b3:68:72:23:37:28:33:
c2:08:48:ac:f9:dc:39:ce:cc:b7:3d:6a:7e:a9:2a:
bd:13:12:6e:f2:12:64:1f:be:58:59:7e:5b:e4:c4:
6e:41:83:a4:23:6d:b1:33:d2:f7:04:4e:6f:fd:24:
ca:e8:36:5c:7a:7d:0b:55:18:96:31:31:88:78:38:
82:63:30:9f:a4:97:3c:30:ed:48:26:d1:66:62:25:
35:78:b5:5c:81:53:1d:60:f0:4c:c5:db:41:a0:aa:
3d:8b:b0:d6:d3:7c:9e:4b:b4:91:64:81:b4:0f:e2:
5a:8d:22:e4:ae:3b:ef:63:6f:5c:2c:70:05:24:db:
b3:ac:68:9b:59:9b:e2:13:4c:7c:1b:35:da:86:ce:
76:c2:eb:5f:cc:0c:84:05:1a:b0:60:08:9e:0b:f4:
1b:e4:92:67:d7:23:3f:ab:e3:fa:dd:c7:96:e6:4d:
b5:6a:de:a1:ed:37:ac:9e:76:df:24:75:f7:35:b7:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31547
Signature Algorithm: sha256WithRSAEncryption
53:3d:af:57:9a:c6:fb:e6:7b:4c:48:9a:a8:03:c9:52:5b:81:
f9:b9:5e:34:43:b1:60:df:29:d5:a4:7f:24:58:3a:7b:96:88:
65:bb:96:53:54:c4:a3:f8:30:53:bf:5d:58:77:54:f1:23:fd:
29:d4:56:f9:18:52:59:11:03:81:93:6b:05:65:de:1f:cb:8a:
26:e0:a4:45:13:6e:75:81:2f:80:6e:de:43:c4:3d:15:8e:6b:
a7:ff:69:85:fe:d8:b8:ad:4f:c6:9b:61:4a:3c:f0:f1:cf:32:
d1:b5:4e:dd:ee:7b:7c:30:e0:17:56:d3:30:5d:60:d4:28:80:
89:90:24:bf:14:22:84:09:c8:aa:2d:89:a3:4f:ab:f1:6f:73:
09:c5:55:f4:9b:55:fe:71:be:19:58:fb:b6:d9:5c:11:72:d9:
13:42:fc:ae:57:40:20:18:67:40:54:ea:93:f5:58:dc:13:2a:
2a:1c:fa:6f:a1:d9:0d:21:5f:fa:93:39:b0:f9:55:dd:d7:d6:
2e:d1:91:86:d3:f9:cc:1c:51:ad:ac:7c:0a:3d:c4:b7:4a:2b:
d4:f8:69:3e:82:53:e3:57:2b:fe:c8:f4:f9:8f:7c:f2:62:2b:
ee:3b:c2:22:75:39:39:0f:39:89:a9:1c:23:9e:93:c3:93:39:
77:5a:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:52 2024 by rpki-client on console-ams.rpki-client.org