Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.cer (raw, json)
Hash identifier: XK7hhcqnrXGdPHOR37Egh4no56rZFPzxWiZ3DGN1uOw=
Subject key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29C34B3C3B962A581F3D096C91E41B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60390
IP: 185.31.180.0/22
IP: 2a00:bf60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c3:4b:3c:3b:96:2a:58:1f:3d:09:6c:91:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:39:e2:57:a2:34:f7:28:87:37:67:ba:35:
e9:81:76:d7:32:87:66:e8:53:2f:0a:c4:cb:1e:ff:
45:c3:8b:ce:b3:c1:6f:b0:31:4f:aa:ae:22:fa:07:
63:3b:99:3b:72:2b:a3:e3:2b:a4:33:d6:b8:50:a4:
5d:43:48:cf:bd:fe:71:9a:87:e5:6d:2b:06:e4:1c:
97:e6:25:af:4b:d6:ba:59:ce:ae:da:42:ec:aa:58:
04:6c:2f:f9:9a:9f:3b:cf:6b:86:f1:97:80:8a:80:
71:dd:e2:ee:cc:41:8f:33:97:42:79:b5:89:19:84:
16:db:d7:02:f3:19:f4:c2:81:c8:1b:e1:14:ef:50:
77:a2:f7:3f:68:31:cf:fb:cc:69:b5:bd:6b:47:74:
0b:67:81:01:b4:cf:bd:77:a2:f7:73:ef:49:9e:c1:
c0:32:41:73:3a:c5:1c:fe:84:10:f9:f3:11:71:d9:
01:75:52:fa:3b:04:72:1e:1a:4f:e1:3b:48:29:b9:
f4:33:c3:a9:75:3b:fb:56:c0:eb:74:22:c9:b9:69:
23:7c:a2:e5:20:84:8c:39:1a:7f:f1:61:2e:77:a1:
80:73:e1:39:fa:46:f7:bd:d7:65:9f:2b:4c:3b:dc:
b5:1b:c6:94:dc:bf:f2:f6:6b:73:7b:de:fd:b6:d0:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.180.0/22
IPv6:
2a00:bf60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60390
Signature Algorithm: sha256WithRSAEncryption
60:2c:36:f3:d2:61:c5:6f:e1:c9:a0:4b:57:35:8a:3b:f7:6e:
cb:75:d4:c8:3d:fd:57:35:c5:48:f3:b5:ca:fa:99:cc:ce:d4:
e8:06:c4:a6:f4:c0:7f:bd:6b:4c:74:40:50:58:90:ec:8d:0e:
53:f4:e3:95:ca:ed:74:dc:aa:88:97:4a:88:ac:fc:ba:41:43:
09:ca:0a:79:ec:fa:cb:a1:22:1c:bd:35:8b:cb:a4:cd:bb:29:
97:07:3c:ea:c2:0e:90:a0:ed:83:00:fc:27:63:8e:ed:e9:e0:
7c:1b:26:d9:d4:53:04:a5:53:90:70:de:fa:1f:70:b0:0a:b4:
9a:2f:d0:ed:48:70:f0:bd:53:89:20:0b:ae:4f:c6:17:1c:80:
d0:18:5b:1d:21:e0:45:b2:72:65:80:93:28:54:a4:25:cb:24:
a9:74:8c:4b:1c:08:27:9d:b7:7d:1d:a7:d6:b8:a8:3f:2b:42:
4c:e7:3d:a6:8d:d5:b8:9f:e1:6f:c6:bf:7a:f8:b2:ad:b7:13:
58:98:ea:ee:23:14:50:49:8e:7e:48:b5:49:07:a9:5c:1b:62:
39:cb:6b:c4:22:25:de:53:8a:82:0a:42:45:a6:97:18:2b:5b:
75:f9:b8:17:27:02:92:64:eb:18:1c:4a:fc:9a:05:e1:81:89:
92:75:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:01:30 2024 by rpki-client on console-fra.rpki-client.org