Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.cer (raw, json)
Hash identifier: VUM44qcM+2zSR0D3tgN4PNGlWobfL41bTFYsYRO/G0I=
Subject key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEEBFE750AFA77E308C1D63762C66BC7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 15:03:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203466
IP: 188.208.196.0/23
IP: 188.214.194.0/24
IP: 213.134.13.0/24
IP: 2a06:f940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:bf:e7:50:af:a7:7e:30:8c:1d:63:76:2c:66:bc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 15:03:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:61:5b:eb:80:46:86:bb:7b:06:90:1d:5e:
86:74:e2:4b:83:a0:07:ee:7a:2f:e3:8d:e9:b2:b2:
12:99:a6:68:bb:ed:22:c2:11:e2:49:33:97:1c:be:
c0:70:f9:e1:31:76:0b:4a:2e:81:2a:86:a5:6a:4f:
1f:26:45:f3:6f:a5:5e:bc:ff:4a:3c:f8:c1:56:7a:
9b:42:b0:59:a1:b2:ac:6a:83:da:71:8a:b4:f9:3c:
5b:62:af:f4:77:9e:ff:30:c7:05:8a:3c:58:17:36:
65:40:4f:c7:b5:25:14:05:20:bb:34:0c:15:c3:cc:
4d:9b:1a:b5:d7:19:b6:f4:97:66:b4:dd:d5:a4:ce:
99:a1:41:b7:18:c1:98:59:41:5e:dc:65:cc:0b:92:
ce:36:e2:51:a0:fa:f4:3a:83:40:a2:d1:90:0e:7b:
13:b8:62:c0:3d:f6:03:85:70:d5:52:3f:b3:74:09:
0d:e4:47:fd:5d:54:bd:fa:37:db:83:88:2b:b2:cb:
0f:5c:f2:21:b6:84:08:ef:e9:a6:86:7f:ec:d4:1b:
53:ef:1b:8d:7e:f5:22:9c:d7:eb:de:c8:af:ef:a2:
15:51:71:13:fe:b9:21:48:ca:3b:58:9f:28:10:4c:
38:b2:38:25:a6:1e:46:f6:8a:d3:21:c6:53:d7:22:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/23
188.214.194.0/24
213.134.13.0/24
IPv6:
2a06:f940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203466
Signature Algorithm: sha256WithRSAEncryption
33:31:18:b9:a3:3d:49:ce:f4:71:81:42:c7:26:ec:e3:3e:45:
46:03:07:7b:a3:4d:4b:fb:e9:7b:64:a8:88:16:b8:d8:55:40:
cd:aa:b8:2a:63:0b:5d:89:4e:22:0e:a6:13:8f:b1:dd:9d:60:
ea:3e:9d:c8:5d:09:4f:dc:c7:ae:4c:e1:e9:df:20:9a:37:40:
9c:28:eb:95:02:a8:7a:31:4e:d3:67:fd:11:68:97:37:64:6c:
ae:d1:af:ad:be:f9:d6:94:2b:09:6e:d1:98:a6:94:f4:be:ec:
4e:9e:b1:f2:23:c1:38:64:97:6f:48:ee:1f:10:06:9e:9a:78:
06:d0:bc:cc:f3:7c:b6:c9:b6:61:f2:e1:6e:d1:d0:c0:cc:b8:
b4:33:d5:c4:89:58:56:83:9e:8f:f9:8e:d0:92:44:bd:da:dc:
f3:8b:09:e0:8d:98:25:f1:43:4c:05:e4:b6:62:0b:d1:a4:15:
5c:c4:dd:90:82:19:c7:cd:41:43:ca:3b:02:2a:d5:ca:19:ba:
40:2e:35:bf:95:5a:26:e9:d1:69:9e:51:06:77:4e:27:84:4f:
d1:ed:da:e6:4f:1f:16:e6:25:8b:65:59:6c:44:5c:80:6d:46:
3c:ce:63:ea:e9:7f:24:21:92:db:c8:73:a2:1e:e3:2b:8b:28:
e7:92:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:22:46 2024 by rpki-client on console-ams.rpki-client.org