Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.cer (raw, json)
Hash identifier: YOiJ1d0IRbCcZG9juQn1fH4tSo+0D5tOxvYvHjIivk8=
Subject key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E00995FFF94966E64109DD42B460F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21305
AS: 51936
IP: 79.98.48.0/21
IP: 80.94.224.0/20
IP: 95.128.64.0/21
IP: 2a04:9b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:00:99:5f:ff:94:96:6e:64:10:9d:d4:2b:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:83:5a:af:80:b0:75:9b:8e:83:44:fd:64:
bf:4f:74:71:fb:92:01:f9:10:c9:b0:a2:2d:f3:66:
51:b3:14:fe:29:36:c7:06:f2:ba:16:0d:44:f5:69:
55:fc:bf:f3:6d:24:ef:4a:72:4a:d6:85:55:3f:8a:
36:5c:0e:43:aa:82:82:cd:bb:a4:de:69:49:ec:dd:
ca:1b:09:42:77:c2:9f:85:25:c3:5b:08:0c:4a:36:
9b:39:1c:8c:2e:08:f8:c4:41:ef:0a:c2:9d:18:cf:
8a:7d:b3:68:5b:97:ef:74:19:1d:79:67:aa:f4:f6:
d8:81:2f:cd:44:db:a5:87:0b:41:22:bb:13:85:33:
d2:4b:2c:04:e4:b9:3c:6e:e7:ee:28:a9:3c:16:46:
3c:ae:c8:df:03:10:03:cd:fc:c1:4f:89:50:81:34:
37:13:7c:30:65:4d:47:fd:3a:23:f3:e7:66:d0:6b:
67:2b:70:1a:b7:99:f6:64:bd:ca:f9:1c:b7:8d:08:
50:b7:16:8e:10:16:27:82:28:31:ec:80:84:42:e9:
2e:b9:79:ff:f3:7b:1b:4a:af:4f:1b:58:59:50:7f:
e5:0c:66:b5:ef:30:44:a2:66:43:d5:1d:1b:a3:f3:
9a:1c:66:14:26:2c:5c:c6:b5:35:b3:f6:d4:c3:63:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.48.0/21
80.94.224.0/20
95.128.64.0/21
IPv6:
2a04:9b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21305
51936
Signature Algorithm: sha256WithRSAEncryption
25:1c:28:5a:61:53:4b:32:05:e9:38:af:36:42:dd:2f:e2:d5:
02:7e:82:c1:16:4d:fd:52:33:53:8d:77:c1:6c:c1:a9:98:63:
6f:1a:4b:99:61:16:a4:e5:a3:fb:a7:40:03:5b:ea:c7:96:1d:
f3:eb:a0:40:3b:3a:37:aa:e7:ee:f8:cc:e1:95:e9:31:a3:f5:
42:d6:07:81:3a:3b:a2:39:bf:11:54:2c:05:69:f2:c8:86:99:
09:ab:ca:a2:6c:58:32:9e:fe:88:24:d7:fa:1d:82:8d:1a:65:
d7:7c:7f:18:d3:14:f0:24:72:f0:89:aa:54:c5:b2:a7:1a:e6:
48:67:3f:dd:d1:25:6c:25:45:c0:08:2b:33:8f:4f:c5:39:55:
21:c9:81:d4:2c:da:c5:46:78:de:ce:98:93:6f:47:82:4e:2a:
d7:48:04:9e:f5:09:a1:86:96:8a:c7:9e:47:d8:3d:b5:1a:52:
6f:ad:87:4b:ca:31:0a:34:fe:85:0c:78:bd:73:2d:63:1a:d0:
b9:77:20:47:09:54:69:c9:08:2e:32:d2:cd:2b:90:fa:26:39:
42:b9:97:9d:0e:0a:f6:58:7c:7f:38:e7:3b:ee:b5:97:2a:60:
00:79:0a:4f:7a:9f:42:b7:22:af:81:c4:a4:80:80:34:e5:fc:
e5:28:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:01:32 2024 by rpki-client on console-fra.rpki-client.org