Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer (raw, json)
Hash identifier: gddy2qFwb7OVvZ5LJwDpz+jsl4IsiZgiEJLJ3lJ21/8=
Subject key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F626EEA1ED26B88B6721E7D585D4F9716
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 May 2024 12:16:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214932
IP: 188.95.14.0/23
IP: 2a14:40c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:6e:ea:1e:d2:6b:88:b6:72:1e:7d:58:5d:4f:97:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 10 12:16:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=218af26f9a36653f4d996719d4a410fe84af4861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:52:98:91:cf:10:d8:13:f3:32:e0:53:f1:
95:23:de:57:3b:1e:ef:b5:19:5f:7f:67:c6:2c:c2:
5e:43:01:34:5b:bb:07:d8:1a:06:18:f8:69:6d:33:
c8:01:9b:b3:f3:88:e7:93:1b:5a:cc:11:2a:86:c1:
b8:5f:33:10:7f:19:a2:67:26:d5:fd:22:a6:84:96:
ba:f5:03:94:c7:65:ac:d5:d8:ac:02:81:c2:6e:b5:
ec:8b:1f:c0:87:a8:8b:4c:45:58:06:79:26:5b:6b:
16:a3:56:2c:b8:40:5e:96:22:9b:48:da:9a:39:7b:
cc:ca:74:8d:7b:78:03:ed:b8:ee:d5:44:6e:4b:13:
6b:3c:ec:e5:01:b4:a2:be:97:31:54:cb:77:37:ed:
4f:6e:97:a6:1d:a4:20:8c:08:78:a5:47:05:35:07:
3e:11:69:60:1f:7d:88:ce:40:60:e0:a9:81:c5:95:
29:6d:32:de:ee:09:65:f0:82:8b:14:44:64:60:01:
e5:74:fd:9e:80:47:f8:6f:9a:1c:33:68:7d:88:ae:
03:bd:6b:bd:10:4d:d9:a9:e2:75:69:3e:41:71:a8:
4e:0b:4d:56:3a:10:6a:2c:94:4c:26:9f:d0:58:b5:
92:18:3f:d0:01:3b:dc:05:6c:b1:5e:a3:c9:0e:e9:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.14.0/23
IPv6:
2a14:40c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214932
Signature Algorithm: sha256WithRSAEncryption
4d:28:4e:65:3f:10:fc:c5:6d:16:f5:d5:ce:8e:c0:d9:f5:51:
a1:c7:39:f5:8b:f8:3c:84:20:3a:66:fa:03:a2:ad:03:61:1b:
ac:3f:ce:43:0d:ed:2a:a7:2b:32:c3:17:35:20:da:6c:f6:f9:
7f:8e:6f:bb:98:b1:72:6d:55:75:0b:8d:a0:4f:c5:e0:80:49:
f7:8b:9c:62:83:c3:51:cf:83:6e:91:44:2c:b8:e7:19:51:ad:
48:12:6a:57:4e:3e:c9:61:31:10:28:1f:9f:0a:6c:89:a0:e3:
71:1d:72:a7:a7:ff:a2:b8:07:3c:bb:c5:98:bd:52:93:7d:b8:
06:90:e9:6f:76:ce:ec:2e:c5:f8:11:ca:5b:da:26:94:ea:9b:
86:e8:15:0f:df:eb:18:e4:20:7b:7f:a1:a3:e3:b2:00:22:35:
7a:4c:39:2c:97:27:7a:ae:a9:ba:1a:3f:5f:4c:1b:d0:e2:d7:
9c:3b:91:57:02:cc:e3:ee:02:ae:5a:2c:5b:93:57:ac:ea:00:
19:a3:b6:de:39:29:ca:e7:c1:a6:0e:94:e3:c7:8e:cb:25:f8:
64:40:3d:3c:a6:8b:f5:41:c5:b4:1d:0a:18:42:aa:85:3c:16:
41:a5:71:65:82:23:29:43:0b:7d:c4:be:f7:f8:b2:ae:47:a4:
4e:56:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:16:28 2024 by rpki-client on console-fra.rpki-client.org