Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.cer (raw, json)
Hash identifier: yFr9o4Wsj0/jCQt7x9U2mpHJXU2hSE0upDj6W/PWGkI=
Subject key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D09DCCADB1C65C64E3905211C2F0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212807
IP: 194.15.40.0/22
IP: 2a0f:7480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:09:dc:ca:db:1c:65:c6:4e:39:05:21:1c:2f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:d5:2c:9c:eb:e3:0e:bd:31:00:0d:cd:93:
24:0b:f2:7c:c0:d2:74:7c:a7:a7:8e:2c:15:3b:fa:
7b:e5:81:55:e9:4c:43:61:03:3a:28:05:38:bd:ed:
48:6f:8e:6b:f4:a3:6a:a6:58:f6:5f:61:44:40:b8:
e3:db:f7:b5:1a:82:54:bc:62:05:d3:91:74:ad:0f:
eb:48:69:fb:38:28:82:9d:91:0e:05:b9:62:67:1a:
7b:b5:ae:96:3b:a8:9d:94:e4:4b:a8:23:69:82:e0:
9b:b0:dc:a1:67:50:66:9d:bf:02:da:c6:24:4d:7e:
44:09:05:dc:46:87:fc:84:26:df:29:e6:7c:23:cd:
54:aa:e3:8f:01:e9:d0:3e:37:a0:df:19:c4:9e:ad:
41:98:01:95:4b:71:22:25:c1:ad:a9:c7:c5:ce:f2:
49:a5:e5:50:58:06:08:3a:a3:c2:8d:2b:15:37:80:
f0:f4:a0:ed:ee:8b:bf:2f:7a:e7:fc:2c:dc:58:11:
4e:43:75:01:cd:9f:76:19:56:41:99:8e:c0:2f:7b:
1c:df:47:bb:7a:07:1b:0d:cf:b2:02:ca:f8:49:1d:
0d:c9:e1:0f:f6:12:f8:dc:25:b2:01:e4:35:2f:7b:
92:6f:76:f3:a6:75:d9:f9:f5:86:98:fa:c6:25:d3:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.40.0/22
IPv6:
2a0f:7480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212807
Signature Algorithm: sha256WithRSAEncryption
49:e5:c3:5c:bd:6e:83:e5:f3:86:63:58:9b:80:e1:7d:84:c7:
0e:f1:58:05:08:0e:1d:ed:99:d9:58:11:45:36:dc:78:43:f1:
e8:e9:41:7a:11:3f:55:c1:1f:4d:50:5b:24:9f:34:c3:69:c5:
e1:9b:80:86:7f:f5:ff:45:bf:4d:89:f4:b3:66:31:8f:d9:d7:
ca:b2:f2:9a:4e:36:dd:ac:9e:b9:8f:df:6d:f3:0c:83:93:ef:
9f:06:5e:d7:2b:4b:78:70:5e:5f:db:97:d1:32:11:73:45:49:
fb:e1:30:df:06:90:56:73:2b:9c:da:14:9a:45:e1:6c:ca:92:
70:31:68:bf:31:4b:a7:26:8a:b6:69:8c:1a:c1:54:dd:cc:b0:
a9:84:c9:33:f2:19:67:41:35:9f:c9:7a:c4:34:a9:3d:54:38:
fe:34:8e:71:66:42:10:d2:97:99:d4:38:dc:ce:67:3b:2f:f2:
45:aa:44:16:d2:d2:96:23:eb:0b:09:d7:fd:6c:c7:1b:6f:a2:
2a:d7:3a:fd:9a:c8:7f:df:b7:e9:b1:ef:3e:02:0a:03:d9:52:
c8:c2:2d:4c:48:a2:48:ba:47:ea:ba:61:5d:a5:25:00:e0:94:
98:f3:25:b2:fb:fc:39:cd:60:a6:8d:fd:db:e4:b1:ae:7a:3a:
8f:85:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:17:25 2024 by rpki-client on console-ams.rpki-client.org