Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
File: 4qKrCidaLQTx4mNassd-s65gOMw.cer (raw, json)
Hash identifier: 2HxzYvQfHridDHJ5NcQD+kludi6LU5VgXLjHVnSUSfU=
Subject key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E1B486F9861ECF90B14FA4B659AEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207065
IP: 185.166.184.0/22
IP: 2a0b:e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1b:48:6f:98:61:ec:f9:0b:14:fa:4b:65:9a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:86:f5:82:52:79:dc:29:26:6b:43:5d:6a:
4e:3e:d9:39:90:d7:65:e0:b3:f5:51:54:d8:18:60:
85:63:df:7a:c0:0b:e1:e3:15:56:6e:a2:7a:21:ce:
b9:99:a7:bc:76:63:d2:c5:8d:29:7c:ae:ae:2e:44:
cc:bf:98:e0:45:d1:52:5a:28:99:b9:cb:ed:1c:bf:
02:bd:8a:61:00:d2:55:bb:4a:60:c2:ec:91:2f:87:
61:7a:f5:6b:54:f7:4e:1b:0f:f8:63:d2:64:18:8c:
09:ea:68:b0:a8:50:cf:be:c5:0b:be:0c:59:df:a8:
07:17:61:e0:15:2f:7f:b5:b7:38:e9:97:21:3d:f5:
ff:dc:f8:be:16:f7:09:70:da:a4:d8:2b:ec:2e:90:
24:76:3d:b2:ab:1b:15:b3:7d:aa:be:fb:be:69:51:
06:f0:74:2b:3c:34:3f:27:54:6a:52:2a:7f:6b:3c:
53:2a:85:e7:e6:fc:ac:e2:3d:4d:28:4d:79:47:f3:
c5:1b:be:67:bc:3c:47:37:f8:6f:43:5c:5a:a6:33:
7b:98:2a:62:72:8a:f1:bd:2e:52:49:f8:f2:4b:39:
cd:dc:30:7c:6e:bc:83:0b:cc:c9:c5:66:60:17:d5:
a1:71:42:63:90:e8:83:52:1f:ac:5b:92:85:1a:66:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.184.0/22
IPv6:
2a0b:e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207065
Signature Algorithm: sha256WithRSAEncryption
36:07:f5:b7:6c:be:c6:05:5d:bd:63:e9:5f:c7:75:4a:2b:04:
f2:85:b9:c3:ea:da:83:42:4f:7d:d2:ea:88:21:ba:0d:ea:df:
04:a5:58:04:a4:62:2e:8a:34:9c:0f:6d:dc:76:c3:9f:4d:e8:
6b:94:20:dd:b3:09:2a:ff:b5:f0:db:db:68:42:9a:9e:f3:84:
3a:02:78:b0:5b:1d:d6:0a:05:cb:a4:f4:29:c1:eb:c3:ac:5b:
8d:a6:5f:0f:d0:88:04:4e:ce:56:62:a3:30:cb:72:0f:f2:a7:
da:54:aa:8a:13:6a:f9:cf:bb:d8:bd:40:b1:f0:6c:46:f7:f5:
a4:af:e3:78:1e:6b:86:29:88:60:fa:e0:a7:5e:55:39:9e:1f:
26:57:39:82:da:e0:36:a5:cc:2e:5e:6d:95:bd:87:b6:34:6f:
1a:d3:55:f0:73:58:fd:3f:c5:82:75:40:43:db:c8:ec:f0:74:
38:a7:4c:64:ba:51:de:8c:58:f4:b7:c1:41:48:25:92:35:54:
e0:b3:58:69:0e:42:aa:f5:d9:f5:d8:c3:cb:8f:19:e6:b5:c3:
f0:34:b1:a1:69:7f:4f:31:a0:9f:02:ca:ba:23:f2:d4:ef:74:
34:2a:40:d0:b1:87:19:0c:d1:ba:79:a6:27:a7:db:3d:05:59:
85:4a:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 20:07:27 2024 by rpki-client on console-fra.rpki-client.org