Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.cer (raw, json)
Hash identifier: E67KVfmJHR48bACpBhyHCmmM7gWquDQRn6aWGL2uzEA=
Subject key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79480E28D145736BF6E4F328A7CFF20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209270
IP: 45.67.28.0/22
IP: 2a09:6cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:80:e2:8d:14:57:36:bf:6e:4f:32:8a:7c:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:88:ca:34:cf:7c:e7:f8:c9:88:1f:38:71:
c1:8e:25:d8:44:a1:90:96:0f:e7:05:ce:15:6d:dd:
22:37:f6:42:19:d7:91:85:61:15:97:4c:ea:21:c8:
a9:03:51:90:79:ec:3a:0f:74:93:10:41:e6:f6:02:
3c:00:26:b9:2d:e7:a2:ac:81:ae:05:9e:ef:b9:89:
74:84:22:11:1e:d8:43:47:81:3c:b2:db:a1:4c:53:
0b:79:bd:5a:08:6b:38:ec:e1:6f:3f:cd:5d:ed:39:
44:81:4d:62:ea:cf:84:c7:83:1e:53:ba:63:24:83:
69:30:16:e2:60:52:a9:7d:26:35:77:93:b3:07:6d:
c1:a9:95:9c:3b:e4:3b:c2:62:25:0e:c6:c4:12:41:
7d:c4:79:2d:ff:dd:93:3e:0a:f5:5a:73:9f:b7:c2:
2f:83:43:6a:1c:b5:12:b1:3f:09:9f:ce:73:39:a9:
d0:ec:a4:83:b5:06:82:81:76:71:7e:42:4e:98:5a:
55:ca:9b:de:ad:fa:96:d2:e7:1f:9b:ba:65:d2:ab:
dd:29:ed:2f:bb:aa:f6:09:41:b8:0e:98:37:23:b0:
5b:13:0e:bc:32:d4:15:0b:9f:35:65:28:50:0a:7d:
23:3f:52:98:fd:e5:e2:f4:a8:2f:fb:c2:0e:66:9d:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.28.0/22
IPv6:
2a09:6cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209270
Signature Algorithm: sha256WithRSAEncryption
83:c0:d9:2b:2f:ba:6f:ec:d1:5f:ef:fe:f8:63:67:e7:c9:41:
9f:2f:bb:2d:c7:08:80:33:e2:a4:a8:36:6e:2d:62:c0:ae:b3:
48:23:41:0b:e4:c6:e6:16:96:3d:fe:f6:9c:62:1e:68:52:8f:
5c:2a:29:2f:e1:d1:ca:77:56:c0:7c:99:e5:49:7e:82:52:f1:
91:ea:55:76:9f:f1:fa:19:4f:4a:8c:34:34:56:92:d9:16:c2:
a7:0f:64:8b:aa:67:c8:f6:a1:b7:0c:09:b3:95:be:0d:74:26:
25:75:40:fa:d9:ab:18:66:f1:99:1d:31:78:68:57:1a:ea:7b:
42:86:0f:5f:4c:33:42:f1:1f:dc:4c:c9:fb:9b:ec:9f:c8:45:
19:2f:1a:4e:c3:23:c7:02:0e:79:a4:93:a4:04:ba:36:c4:56:
f2:65:9d:be:7e:7d:ec:81:e3:d7:65:a3:47:a6:68:69:9f:65:
14:a2:8b:ad:7a:33:d2:cd:87:a3:90:8a:53:d1:d3:a9:db:5c:
55:bf:4f:ef:86:6b:63:0a:9a:ce:22:38:db:e3:40:ed:2f:fe:
90:16:bf:e4:10:e3:4a:47:91:79:ab:8c:58:f6:a7:f9:72:d6:
bb:ed:1b:c5:84:af:ab:da:44:2f:b2:f5:41:41:b6:5e:8e:87:
4a:53:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:48 2024 by rpki-client on console-ams.rpki-client.org