Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer (raw, json)
Hash identifier: y0HoXdwhxib4ATbuIjy8oNln3REzqujh+eQ79Waxqs8=
Subject key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ED1FA341288CFA0AD3F62022CE5E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42396
IP: 77.109.0.0/18
IP: 94.248.0.0/18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d1:fa:34:12:88:cf:a0:ad:3f:62:02:2c:e5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:40:38:db:94:9f:36:1f:02:da:ee:78:d6:
64:82:71:cb:e8:46:ab:c9:c5:1e:57:67:5b:3b:07:
f0:ec:00:5b:2a:28:10:c6:48:e3:05:b4:53:9f:e7:
ac:9e:0a:42:ca:9a:bb:02:c7:de:92:b9:0e:63:41:
7e:6c:ac:23:3c:ac:9c:e8:91:c4:af:13:c2:ec:2b:
b3:76:82:f2:a4:0a:2f:46:55:43:76:84:ac:5a:ec:
ce:f9:ba:e9:cf:9b:2f:da:d6:32:7d:a9:70:1f:8e:
ca:28:4e:67:fa:de:f6:bb:37:34:d0:1c:54:8c:48:
e9:22:73:4a:c9:c3:90:78:61:f6:d4:64:4c:b4:85:
b1:6e:52:d7:9b:39:0d:7a:9e:e8:55:ce:93:42:48:
b1:41:ca:cc:08:b1:02:e1:ed:82:d6:61:53:66:90:
fc:4a:42:85:1d:ef:46:ea:20:2b:23:3f:dc:fb:62:
b2:03:26:17:f9:1c:d8:80:5e:b1:65:b9:50:16:f4:
d4:fd:37:c0:4c:87:89:9f:57:23:6a:67:b0:9a:a5:
7c:81:96:15:2d:dc:7d:11:2f:d3:69:c2:af:d7:76:
70:16:98:ad:6d:d8:90:ef:73:e0:76:06:af:37:c6:
c8:27:78:a9:22:8b:5b:b8:4f:5e:ae:d1:ae:45:d9:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.109.0.0/18
94.248.0.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42396
Signature Algorithm: sha256WithRSAEncryption
8c:13:43:ae:eb:99:f9:f6:05:12:96:4c:45:d7:a2:94:57:3c:
88:52:09:36:c3:d1:15:07:12:27:20:74:61:67:c5:c1:03:d0:
b5:d5:d6:d7:20:54:d0:cb:68:28:7a:e3:e2:19:85:d4:95:33:
ff:f9:84:f3:0f:de:22:13:d3:d2:26:12:41:5d:f3:65:41:72:
da:da:c0:a4:aa:2e:4e:b2:da:73:38:13:85:f3:a7:71:0f:3d:
ff:7a:9b:cf:5d:f1:60:18:c9:9f:b1:20:36:c9:a1:01:9d:fe:
20:15:a1:0b:91:00:1e:89:f4:89:8b:cd:f7:cb:58:c7:e8:10:
6c:66:94:de:83:38:f0:9d:ac:c4:89:3b:cc:13:d7:e7:3f:ba:
40:6f:57:2f:66:a4:d0:92:b1:cc:88:e1:46:5e:4f:3e:d3:6e:
12:89:d0:82:fc:7b:8c:6d:ee:27:8c:a1:81:8c:95:49:e5:35:
5d:75:e5:28:89:91:d9:30:08:57:bd:a2:c5:1b:80:b4:07:a6:
44:e4:84:7d:d9:df:e0:50:31:65:be:d1:bc:f9:44:e9:51:ab:
25:9c:19:29:44:2f:ba:53:61:f9:5c:bb:32:e7:55:69:8d:f5:
c0:1b:ab:22:05:a6:b2:77:2f:3f:25:99:9a:a1:69:b5:a9:96:
5a:9e:a0:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:33:51 2024 by rpki-client on console-ams.rpki-client.org