Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer (raw, json)
Hash identifier: VeOvKpY/6zY1xQEOnpWA6PRUhVcVsrZJTYOtsvgEqzE=
Subject key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC10A7B4F225351C1EE36FC023F32B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204737
IP: 185.242.52.0/22
IP: 2a0c:bd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:10:a7:b4:f2:25:35:1c:1e:e3:6f:c0:23:f3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:6d:1f:2a:2c:2f:bd:24:28:be:99:79:2d:
e1:bf:6b:1b:5d:87:07:d3:93:c7:c2:88:1e:44:27:
2d:3b:2c:fa:77:da:a5:63:60:47:53:e2:16:f2:bf:
d0:65:5d:0a:66:11:47:f1:47:e3:b8:3e:78:b8:8e:
2c:11:9a:80:60:f7:fb:cf:58:3f:ab:92:e7:77:9c:
ce:15:79:c4:52:94:c3:a7:5b:5f:7e:c9:b2:fa:6e:
4a:59:b9:63:e1:1e:93:b0:20:08:95:3d:1a:ce:98:
ae:18:bd:68:2e:ff:06:99:01:ad:37:62:f2:5b:a6:
e5:c3:4a:0a:7f:f5:e6:94:bb:96:5f:11:85:78:1e:
fd:b5:a1:ca:e0:9a:0a:d4:fc:7f:bf:39:71:8f:c0:
4d:f0:aa:27:db:be:19:11:51:e6:c9:8f:ad:07:9b:
93:43:a5:66:b5:78:0f:c0:71:8b:f8:4f:b7:4b:64:
e7:96:e0:60:ff:35:19:91:90:2b:a4:d8:28:77:97:
0e:14:2e:4c:db:50:46:f2:3d:53:00:0b:cb:fd:39:
d4:16:02:b2:49:d2:b9:d9:b7:98:13:dc:d5:69:a4:
3d:54:8c:3e:ec:bc:66:2f:ad:7b:9c:63:c1:d5:54:
53:3f:13:ea:0d:92:e0:1f:c1:21:b0:9f:a5:9a:b8:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.52.0/22
IPv6:
2a0c:bd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204737
Signature Algorithm: sha256WithRSAEncryption
01:21:f6:04:fb:f8:3e:42:cc:b3:05:51:a2:fa:1a:bf:bd:38:
7b:8e:69:f6:85:90:64:c3:60:5f:48:96:c4:c1:89:b2:97:cf:
52:40:07:3b:39:58:b0:83:1e:f1:55:61:c8:3e:40:94:4b:44:
c1:2d:8d:04:3a:05:92:f8:43:71:b4:ee:57:33:7a:a9:29:33:
47:2d:32:2e:06:53:b8:94:d0:22:3e:1a:93:27:9e:26:81:bf:
55:26:fb:d1:55:0d:97:6d:61:fa:b6:89:88:44:97:03:6e:6d:
0f:33:99:56:d5:14:6b:c4:3a:cb:c8:4b:20:86:23:64:fa:63:
66:b8:77:b0:19:95:ad:39:26:13:aa:04:26:74:bf:6d:9b:cb:
0d:ab:b7:fd:30:fd:66:0f:09:0c:7b:db:49:c0:83:a3:dd:74:
17:fb:e6:9a:0a:bb:93:48:59:fd:9c:d2:d2:05:1f:61:45:41:
70:14:fe:f9:24:84:09:63:13:b3:06:64:93:7a:9c:a6:ca:62:
a1:19:d9:4f:c7:9c:32:02:f9:5b:a5:66:b8:1f:e3:0d:86:5c:
61:9d:c0:67:b7:65:3c:46:fc:47:91:34:6e:40:45:fa:67:62:
22:bb:da:29:3d:2d:3b:4e:c6:59:3a:8f:ee:5a:2e:ae:60:71:
9e:83:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 08:02:18 2024 by rpki-client on console-ams.rpki-client.org