Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer (raw, json)
Hash identifier: tta/07+MscAorVrttodr65NKrp8+rlkcOs/feFAUeYo=
Subject key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB351F5BB1FDE8A079635A2350D51A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39216
AS: 209565
IP: 46.21.251.0/24
IP: 212.126.96.0/19
IP: 2a04:2dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:35:1f:5b:b1:fd:e8:a0:79:63:5a:23:50:d5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:cb:ab:3a:a1:e8:44:06:2c:b0:8b:25:3a:
8b:67:b4:8f:c1:e6:e9:be:ac:1f:ab:d1:26:bf:bc:
e0:2f:8a:25:7a:bc:a6:04:fb:7e:21:b5:d6:78:43:
c6:c1:b0:be:51:9f:2a:bc:ae:8b:56:fc:ff:e4:41:
ef:55:d5:2a:36:bc:90:79:cd:ec:a9:cf:4d:bd:7d:
7a:5f:8b:a2:1b:c9:7c:dd:fd:29:9a:6b:67:19:23:
41:02:fb:bc:67:49:fe:80:bb:76:1a:07:e7:94:53:
81:2f:f4:02:f1:fb:9b:7a:97:65:73:58:39:ba:25:
38:99:39:1f:85:78:38:a4:bf:4a:69:dd:a4:b9:33:
44:7c:cf:55:cd:a0:72:71:1f:39:e5:0e:83:96:fb:
46:10:e5:2c:8b:6f:35:4d:4c:3b:b3:43:52:b8:37:
fb:24:d2:1b:34:01:fd:6a:ac:da:72:81:79:63:f3:
ef:9d:07:4f:80:f8:61:85:e4:24:f2:7a:e6:b7:05:
3b:24:d8:48:1a:dc:c0:9b:49:c0:33:81:a6:6d:b3:
7a:4b:7f:5f:60:ad:aa:34:63:60:a9:75:03:8c:d5:
93:4a:44:57:3c:67:47:18:88:04:97:7d:5b:f1:16:
82:f1:88:3a:46:51:8a:62:31:dc:ac:62:43:8c:89:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.96.0/19
IPv6:
2a04:2dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39216
209565
Signature Algorithm: sha256WithRSAEncryption
9f:1a:6f:b5:a0:9d:b3:58:ba:72:e9:70:8b:86:a6:38:bd:d1:
7c:8b:e5:3f:78:f2:3b:97:99:19:42:56:ef:e6:09:1b:0c:37:
79:c6:b8:29:44:04:eb:fd:b1:31:2b:49:df:e8:a9:f2:2b:46:
f6:49:ab:2b:ad:15:c8:7a:02:1d:5a:45:9b:9b:4b:31:44:c5:
5f:6e:e6:12:68:1e:7f:73:1e:80:16:de:70:da:fa:d2:58:aa:
13:4e:fe:ca:81:58:de:6b:da:1e:79:cb:47:14:cc:04:2e:5a:
43:03:f7:95:f4:60:a6:b3:6a:de:97:5d:d2:ad:7d:ab:f1:78:
7d:eb:3f:29:ae:cb:46:8e:2e:95:fd:68:48:d8:0d:2d:dc:a5:
24:65:70:7f:56:35:ff:05:58:e2:6c:22:69:ff:6d:35:7a:7b:
3c:32:36:9a:58:aa:6d:40:2c:4c:a2:58:a9:68:e8:c0:a6:8b:
cb:95:dd:19:ea:05:41:c9:00:d0:f8:e2:a0:d5:f2:fd:14:c8:
bf:cf:47:cf:91:54:98:ab:eb:c5:60:2e:0e:0c:7f:3e:5a:dc:
73:7a:9d:84:a9:a7:c6:75:da:f0:c0:f2:51:85:50:ba:31:91:
1b:cb:88:3c:d9:8d:95:ab:8c:27:02:60:46:e9:6d:9e:86:c3:
bc:d1:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 01:13:07 2024 by rpki-client on console-ams.rpki-client.org