Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.cer (raw, json)
Hash identifier: W9KYi2eA7uUPJ6jqFeAAVSt4/HwjUlTAYLYhn6l5nXE=
Subject key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80139F467BCF297E5A3DD5CE3477859
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210530
AS: 211922
AS: 213373
IP: 2.56.10.0/24
IP: 149.3.170.0/24
IP: 2a10:5fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:39:f4:67:bc:f2:97:e5:a3:dd:5c:e3:47:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:39:18:1a:ef:e0:c2:43:ed:52:2a:21:82:64:
91:b1:4d:56:5c:7b:96:cd:f8:f5:f2:d9:db:30:28:
16:2d:e1:bc:96:bc:f6:09:06:1b:a0:2e:5d:e9:c1:
a4:3e:de:de:79:65:5d:e6:c8:be:70:63:fc:0b:2a:
99:6a:15:3f:88:7e:f9:7c:d9:0e:ee:46:7a:73:e8:
f8:7d:2d:86:bf:04:f8:ab:83:bf:b5:d5:72:83:a1:
00:57:3b:bc:16:d8:a8:16:56:9f:f7:de:fe:d7:88:
4b:16:f4:c3:c2:87:05:68:1e:99:9d:8a:2f:29:dd:
a3:47:71:f6:2e:fb:75:37:a7:e8:e4:e1:f4:1f:fc:
27:da:a0:3d:43:66:35:48:af:f2:6c:bd:65:d8:ae:
b3:a0:3b:bb:57:e5:ce:0a:48:aa:bd:1a:48:21:1a:
9d:2b:9b:5c:cb:60:b0:65:8d:aa:96:8a:85:c3:91:
9e:da:fe:f5:93:6e:ef:4c:dc:b3:45:ba:4c:21:b2:
cb:b1:97:d0:78:3d:92:0b:9a:77:23:73:49:4a:9f:
63:f4:65:4d:ff:66:e2:51:f5:2d:ad:0e:bc:00:dc:
9c:21:ba:b4:63:e2:c2:62:02:9e:2f:cd:44:de:69:
79:7f:85:bd:b3:6d:b1:f3:1c:9b:d6:7f:e8:91:4e:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.10.0/24
149.3.170.0/24
IPv6:
2a10:5fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210530
211922
213373
Signature Algorithm: sha256WithRSAEncryption
69:db:03:c8:73:be:e1:5c:9b:50:d1:96:77:31:95:73:b9:f9:
43:68:03:1f:06:0a:5f:10:bb:bc:a4:79:b5:4c:6b:22:b2:41:
7e:29:67:1f:5a:49:a4:3d:7e:7f:aa:11:37:eb:a8:59:8b:a2:
b9:d8:b1:05:94:fa:8c:50:5c:3f:3c:57:9d:8f:08:61:1c:b4:
cd:7f:ae:0b:1f:f8:53:a5:41:32:9e:64:45:47:12:cc:eb:2c:
75:23:26:93:0d:73:d5:2e:56:55:e2:8f:72:36:0f:2c:7d:43:
6a:f2:82:5e:9b:81:a4:6b:46:9a:66:4c:e2:d0:8a:c6:91:3b:
76:ad:82:ff:22:62:5f:52:f4:fb:a6:50:b3:b2:a2:bc:50:5d:
14:9e:ee:18:f4:b7:3c:92:e2:31:4c:9a:00:05:b0:79:14:14:
fc:31:1b:52:06:03:86:72:8f:ac:b6:23:8c:7a:ce:84:cf:c0:
b0:42:c2:2c:d9:e8:47:eb:cf:a1:aa:c2:f3:0c:84:3b:cd:be:
27:0e:23:62:a8:6e:2c:70:df:18:ac:10:49:9b:cb:2f:34:8b:
72:30:37:a7:f8:1b:c5:d5:68:8f:09:9f:28:65:b4:2c:8a:b4:
c7:73:d4:f7:36:e0:39:86:71:2f:5e:07:21:59:49:3a:63:69:
ca:e3:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:14:08 2024 by rpki-client on console-fra.rpki-client.org