Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer (raw, json)
Hash identifier: v2Kx3fDzmYBJckh0nWyMIuvUGvS/4zHxuMjtB7jt0M8=
Subject key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B77DCA5B0DCE37DBE327017463F3FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62088
IP: 45.93.132.0/22
IP: 146.19.244.0/24
IP: 185.48.56.0/22
IP: 185.245.184.0/22
IP: 2a01:9520::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7d:ca:5b:0d:ce:37:db:e3:27:01:74:63:f3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:a5:7f:27:4d:12:1a:3f:99:18:81:60:be:
3f:d0:76:2d:63:6c:f2:c4:c9:7c:bf:50:fb:99:54:
cf:34:91:8d:b3:a6:51:87:91:21:b9:16:a4:81:35:
dd:7b:6a:c5:27:93:2c:29:cb:67:19:8e:c8:53:9b:
a5:ad:eb:67:81:92:8d:9c:b6:51:86:fc:f4:4b:2a:
ff:09:0b:26:89:94:92:c8:04:b2:02:b2:89:af:ab:
56:9f:f1:43:d8:55:31:82:f4:77:5d:80:b0:44:3a:
ff:73:ac:b5:bf:8c:c6:7d:a9:39:31:ae:bb:10:4b:
7f:3f:f6:42:25:66:ae:91:0e:7d:3d:83:4b:f7:b3:
32:29:3e:6a:76:0d:7e:94:12:c3:57:b8:06:b9:64:
3a:9f:5f:3b:94:02:7c:2a:4d:41:4f:1f:6e:2f:f1:
2d:14:9d:be:a8:a9:13:3a:24:56:a3:22:4a:8f:66:
19:25:38:de:8c:e3:0a:f8:7a:fe:99:3d:56:76:2a:
72:d6:b6:58:6e:f0:30:1d:01:e6:04:8a:6b:dd:28:
2a:43:cc:31:c8:80:ae:b1:36:19:fb:f4:ab:9b:da:
3c:bb:04:78:19:bf:ab:5d:68:15:2b:6f:20:44:ec:
48:df:7e:cd:d3:16:76:8a:d2:e8:d6:a9:f8:17:04:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.132.0/22
146.19.244.0/24
185.48.56.0/22
185.245.184.0/22
IPv6:
2a01:9520::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62088
Signature Algorithm: sha256WithRSAEncryption
0d:67:c4:63:15:00:58:ad:74:fa:a2:5e:41:01:d9:27:b0:51:
9f:29:0a:91:1b:f6:c7:7d:0a:e6:e6:dc:cf:29:1d:2a:05:10:
0e:4a:d2:f7:0e:5b:a3:0a:e0:59:03:54:05:d5:9d:44:9b:4f:
4e:e8:76:e4:cb:8d:1d:a7:ed:2a:42:5c:6f:c7:cb:ac:18:25:
0f:29:3c:50:fb:d6:b1:07:7c:12:2c:ba:6b:14:12:f5:c4:3b:
31:b9:5b:07:c8:0e:e5:4c:4e:37:c6:77:a4:89:dc:b3:a7:89:
6c:30:a8:d2:d9:40:82:07:d5:64:f8:88:07:24:73:3d:78:57:
bb:30:e5:7a:5e:7d:0e:93:86:dc:a6:26:c9:2e:36:fc:a3:54:
3d:c6:09:91:70:cd:ee:e2:23:ca:e9:e2:81:72:cc:37:53:ad:
2e:66:75:ae:f2:3c:c2:95:a2:04:87:57:c5:b0:c0:71:e9:05:
84:98:d5:35:b1:c4:40:5a:9c:10:6f:63:b5:4c:48:81:c3:96:
79:cf:ec:2d:19:19:87:07:ee:be:50:8f:b8:99:42:b9:b6:a1:
e2:5b:c1:2b:e6:98:ae:21:3a:8e:c2:f3:38:2d:c8:f5:97:40:
0d:14:f1:34:22:d3:9b:c9:84:05:44:3e:8a:87:a3:e5:4a:67:
91:27:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:50:42 2024 by rpki-client on console-fra.rpki-client.org