Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer (raw, json)
Hash identifier: RbNWzEy4djeYyP7e0eQ6W7pNUqGDpXJXiH11zJMcEPw=
Subject key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8705B67105AECC9B959FD620108EDAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201614
IP: 185.69.212.0/22
IP: 2a05:2540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:5b:67:10:5a:ec:c9:b9:59:fd:62:01:08:ed:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:d1:94:6b:10:73:c7:40:f2:98:38:a8:1b:
44:70:30:47:db:2e:b7:2c:14:36:21:18:2e:47:ec:
71:f1:b9:e6:f2:2e:5d:77:9c:e7:4b:61:bd:59:2b:
61:81:60:fc:d9:09:32:d4:69:e8:75:49:49:60:ac:
8a:33:8c:f1:7b:28:fc:52:22:fe:89:3a:64:58:e0:
a6:34:ff:fa:2d:c6:d6:14:87:a5:5e:08:63:01:98:
13:16:5a:32:e9:e4:ee:7e:9f:f0:e5:c0:b7:31:1c:
50:21:4d:fb:6a:ed:43:0e:01:88:bf:89:5f:85:e3:
32:58:a1:6f:5f:ab:b0:77:05:d1:74:63:9d:01:37:
49:28:72:cf:98:61:93:ff:22:5f:61:7e:cb:1e:63:
23:f5:70:aa:41:44:52:9e:98:38:6a:36:66:8d:42:
80:f2:be:d4:cd:7f:2b:af:43:95:5f:05:b8:9a:2f:
a6:68:bf:bd:4b:ba:59:c1:1c:34:a4:20:7b:f2:b4:
fa:fa:21:c7:c8:d1:8b:99:81:19:37:81:fb:82:1c:
21:7d:fc:7f:84:be:ab:c0:26:80:43:f9:20:c9:53:
31:5a:4b:ae:60:7e:e8:6c:0a:ba:00:81:8b:67:07:
bd:79:b3:a2:66:84:ed:ff:f1:3e:f8:dd:e6:a2:aa:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.212.0/22
IPv6:
2a05:2540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201614
Signature Algorithm: sha256WithRSAEncryption
8d:9e:06:5f:f5:06:26:f6:0f:5c:33:48:21:d2:d4:d8:13:cc:
03:e8:69:fc:10:4f:b1:cc:89:b1:e7:c1:8d:54:ba:fb:6b:ff:
86:95:6a:a5:8b:2f:58:98:00:4f:e8:8a:5f:52:2c:26:06:01:
6d:5e:4f:aa:06:4a:7e:86:80:ce:fe:41:ec:c4:7e:d1:df:02:
ce:d5:a0:4b:bf:9e:8b:ff:46:be:ae:39:4e:7c:69:2c:25:91:
0b:54:09:56:eb:20:95:30:eb:a0:d9:09:37:e9:b6:df:5c:16:
1e:95:50:51:5c:c0:0b:f6:e8:d3:77:c0:52:8d:d8:19:0f:ec:
77:fb:89:79:6e:ac:71:d5:72:87:fa:dd:e3:07:0d:26:6d:03:
ed:2a:e4:46:f3:e3:2f:ef:73:7a:fc:8f:93:25:13:34:a4:42:
fa:a8:16:43:52:cb:32:8d:ba:80:61:86:7a:d8:1b:7a:7e:97:
13:2d:b9:4c:1f:d9:f2:08:ae:7b:4d:12:dc:29:ce:37:f6:25:
23:94:d0:f8:8d:28:55:0e:05:2f:d8:91:d8:b5:2e:c0:14:e1:
94:a5:bc:e9:be:7a:2a:bc:a5:8e:0e:4c:62:c6:26:46:9d:7c:
23:d8:ef:ec:94:12:a5:75:bf:15:21:1e:96:34:7a:5b:0e:a6:
49:49:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:38:36 2024 by rpki-client on console-fra.rpki-client.org