Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.cer (raw, json)
Hash identifier: AYUXEz/TDFB9LcD9fJBanffsdmdS1Cy9vpQB2/q05U8=
Subject key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F0B1C9BED797AF899CAC39E3A6C965E12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Apr 2024 13:19:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29691
IP: 5.148.160.0/19
IP: 92.42.184.0/21
IP: 94.230.208.0/20
IP: 178.209.32.0/19
IP: 185.88.236.0/22
IP: 193.17.85.0/24
IP: 217.150.240.0/20
IP: 2001:67c:2f98::/48
IP: 2a02:418::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:1c:9b:ed:79:7a:f8:99:ca:c3:9e:3a:6c:96:5e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 13:19:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:71:4a:b7:2b:1c:37:a7:fa:7c:85:3c:91:
34:dd:2c:3e:ea:e1:b7:ec:64:68:51:9f:5c:a8:1c:
50:34:8c:71:7d:07:cb:ec:c1:76:8a:f0:25:9a:ea:
3c:ec:cd:38:68:79:87:ae:53:36:95:70:c8:e4:4d:
68:86:4b:eb:27:8a:ca:2e:a4:3d:03:92:51:43:f1:
ae:8d:02:76:6e:1a:a5:d5:2a:a0:d2:de:fb:6d:53:
76:d3:ce:ec:0b:43:ea:81:4f:11:7e:d4:c1:90:47:
9a:7b:71:62:5b:7e:60:1b:46:ef:ba:88:d6:2a:6e:
f5:20:12:20:40:04:b9:17:f5:da:df:87:fe:3c:2e:
71:55:23:40:61:92:8a:51:3b:5a:b0:4d:37:9a:a7:
c5:87:71:37:1a:ba:8e:9f:b1:ac:9e:df:c4:1c:00:
df:37:b4:8e:1d:86:b5:c5:28:bd:46:8d:63:86:ef:
0e:af:5e:a8:c4:c9:89:2a:d1:3a:3b:84:e3:93:80:
84:77:14:80:83:c2:21:62:af:55:fe:bc:55:d4:da:
d6:92:0a:4c:c3:c7:c3:12:17:2e:82:54:c9:81:2e:
ca:2b:01:22:bc:69:32:06:30:5f:eb:77:d0:72:d8:
d9:7a:11:25:15:90:7c:5d:68:1c:c9:ce:28:cb:1c:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.148.160.0/19
92.42.184.0/21
94.230.208.0/20
178.209.32.0/19
185.88.236.0/22
193.17.85.0/24
217.150.240.0/20
IPv6:
2001:67c:2f98::/48
2a02:418::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29691
Signature Algorithm: sha256WithRSAEncryption
98:b0:2b:30:3e:70:ae:ef:61:07:78:86:c9:92:f6:92:57:01:
2a:36:cb:16:d8:3b:6a:6e:66:1e:fb:6b:6e:58:a8:9e:e0:f0:
c4:19:f6:e7:42:91:c3:01:8d:51:cd:2d:c1:a4:85:73:2d:84:
97:21:70:fb:df:31:38:c6:20:a8:8b:9e:af:c5:5f:a9:65:b4:
41:e2:06:de:c8:60:8c:96:f1:31:11:14:c1:cb:8c:a8:82:4c:
df:7f:d4:77:f2:b2:70:19:61:be:6c:31:75:58:f4:0e:f9:f8:
42:e4:31:a9:d0:f1:69:03:ff:36:47:bb:09:09:0b:09:b0:05:
1d:09:81:4b:ec:fe:f5:37:e6:3c:31:5a:fd:79:14:b5:9f:51:
f8:c3:8e:0f:b9:bb:f9:0a:cd:70:1d:ea:65:ea:27:b3:5f:a5:
8f:45:a0:bd:bd:47:c1:68:9a:a9:6a:d6:44:e5:4d:70:3f:d6:
d1:60:8e:c3:79:6a:82:57:7c:99:4f:37:c6:75:a0:2e:21:f0:
51:18:e0:b0:54:da:d5:0b:33:d2:43:53:98:9e:ed:b8:2c:d8:
96:e6:e7:3b:37:6c:d8:e9:96:31:61:7a:1a:b5:62:51:2a:74:
ee:3e:6e:5f:46:46:46:c0:bc:e2:e3:76:ac:fd:4d:be:9e:40:
76:e6:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:55:36 2024 by rpki-client on console-ams.rpki-client.org