Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.cer (raw, json)
Hash identifier: BMn8ZoCLVfE2Yhq8zLQxhmytdOm20eu3NAidzko6b+0=
Subject key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCF9AE7C49226D6EAA5F4477A5F613
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12996
AS: 208045
IP: 151.249.120.0/21
IP: 185.134.244.0/22
IP: 185.201.124.0/22
IP: 193.57.14.0/23
IP: 193.57.22.0/23
IP: 194.63.248.0/21
IP: 2a01:5b40::/32
IP: 2a0a:c340::/32
IP: 2a0f:c180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f9:ae:7c:49:22:6d:6e:aa:5f:44:77:a5:f6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebdb225471f2d6e41060b34185725485481014b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:4a:9c:54:71:c8:c3:9a:c4:de:e9:33:32:
cf:4e:4c:95:5e:25:f9:22:40:c0:1f:d4:a7:ba:47:
19:84:27:96:17:0c:26:f3:8c:0f:31:89:af:af:50:
92:9c:f4:e7:0d:23:02:bc:3f:9e:b6:45:ca:31:b9:
c5:46:09:89:f0:91:39:ee:1e:fa:c5:0f:f1:8d:03:
22:49:d6:ff:9f:f3:c6:7f:f7:bf:22:f0:02:d0:4e:
d1:f7:bf:34:c5:49:89:ae:a3:a5:e9:73:4d:f1:1c:
bf:75:0f:91:4b:68:74:1c:51:e6:94:9e:fb:0b:70:
fe:78:b8:1b:9c:53:6a:d0:80:51:d9:2f:53:ea:0f:
d4:f6:af:1e:e7:74:51:ee:aa:7c:ea:75:f0:0f:0a:
78:b6:f3:cf:8c:2f:67:90:d0:0d:63:f9:4f:1d:ee:
9c:57:76:47:99:06:d4:13:e8:8d:1f:a6:d3:f7:b6:
e0:89:c5:ce:c6:85:4c:d9:d4:67:a9:1d:37:3d:f1:
54:77:8d:b6:f5:de:aa:68:62:7d:3f:7f:55:e6:11:
2e:1e:be:12:df:31:b7:7f:fb:c6:0e:2b:12:10:80:
66:d7:f3:58:4d:3c:f4:0e:63:06:04:e0:f6:f4:bb:
fd:60:25:b9:02:7a:44:fd:64:b9:bc:a3:79:cd:78:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.249.120.0/21
185.134.244.0/22
185.201.124.0/22
193.57.14.0/23
193.57.22.0/23
194.63.248.0/21
IPv6:
2a01:5b40::/32
2a0a:c340::/32
2a0f:c180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12996
208045
Signature Algorithm: sha256WithRSAEncryption
63:f6:8b:2c:b9:64:6c:10:5c:ef:76:4f:11:c3:db:8f:5e:1b:
26:ca:31:2f:55:e3:9f:c5:36:63:e7:b1:c4:fa:2f:33:b9:50:
1c:cb:9e:31:aa:66:3c:ae:63:0c:da:eb:aa:40:8f:fe:d7:f6:
f9:3c:06:30:7e:37:9d:fc:89:3a:27:ee:d7:dc:4d:9a:29:f8:
89:6f:41:80:52:b0:c8:41:d2:87:15:94:26:d1:82:85:f4:0b:
41:1a:10:fe:41:41:31:e9:0b:97:c7:a0:fe:48:ab:56:d4:d7:
22:bb:84:7d:9b:5d:22:c7:cf:f9:94:41:53:7d:00:7e:de:0b:
ec:ec:21:78:fc:5c:be:70:c0:18:8b:e3:94:a7:01:38:8d:e4:
a2:7b:89:e7:55:d9:b8:19:55:f1:4a:e1:7f:06:10:62:1c:54:
36:af:c7:ad:2a:4d:41:71:0a:af:63:7d:87:a8:61:ae:07:db:
6d:c3:f9:df:24:9b:1e:91:e9:ad:69:96:45:21:21:7e:a8:e6:
53:a8:0f:79:59:68:b9:7f:72:a1:dc:d1:ec:2c:1c:71:4d:ee:
8a:b6:f1:02:76:2d:e0:f4:f7:80:6d:3b:2f:c9:2d:c2:96:68:
ce:ec:20:89:ec:62:bd:27:b8:a9:d0:15:87:de:28:bf:4a:20:
71:a3:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:21:19 2024 by rpki-client on console-fra.rpki-client.org