Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer (raw, json)
Hash identifier: B7aDB9Oq5DInrFqPPXCeqiA+sSX8f5+nPKKph9ytZGA=
Subject key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B68C15624BBC29BE6779A568C322DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42035
IP: 185.57.25.0 -- 185.57.27.255
IP: 185.199.140.0/22
IP: 2a00:1890::/29
IP: 2a0b:2b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8c:15:62:4b:bc:29:be:67:79:a5:68:c3:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:69:6d:07:e1:6d:ed:da:41:6a:78:17:5f:
b1:90:d8:61:13:84:cd:a4:5e:57:6e:4a:1f:c6:a7:
4a:a4:c4:e8:49:76:fc:fc:10:23:ff:83:f8:45:fc:
89:db:a6:96:00:bf:07:c4:a1:2c:b5:43:8b:89:5c:
80:18:54:28:6f:6e:4b:74:dc:62:90:02:6d:a6:01:
fc:fc:e2:db:3f:0f:97:16:47:dc:3b:a5:f1:41:15:
44:68:34:bb:e6:17:ff:f5:4e:c5:4d:b3:3c:fd:2a:
2a:b4:45:60:64:17:44:5c:32:c7:0b:6e:4b:25:c1:
3d:12:53:c5:9e:64:46:b8:da:85:8f:a0:0b:b5:86:
90:c0:34:cf:c4:6b:92:1c:2b:6b:b6:0d:54:92:e2:
86:f3:3b:ee:69:2c:d5:f1:e5:fd:89:ac:8b:c1:64:
c7:81:00:e5:b4:72:87:fb:17:32:95:29:38:b8:52:
c0:04:7f:d6:f9:c2:7a:c1:b7:77:c9:8a:35:cb:2c:
ac:5b:bf:16:cb:89:e2:aa:f4:fe:c1:30:29:98:3c:
a7:e0:03:b3:e7:30:ae:0d:9d:bf:b0:4f:a3:c3:5e:
51:15:30:5f:20:c0:21:a8:fc:c8:a6:4d:fc:96:8c:
80:14:ee:27:eb:3d:22:d0:0b:42:27:aa:70:4c:85:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.25.0-185.57.27.255
185.199.140.0/22
IPv6:
2a00:1890::/29
2a0b:2b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42035
Signature Algorithm: sha256WithRSAEncryption
08:4c:f8:52:e9:30:0c:c9:94:1f:70:8c:61:d7:a4:e9:45:b6:
4f:a4:a2:27:8a:78:70:26:27:2a:ce:1a:3d:9c:39:4e:1c:58:
33:a9:3c:cd:5b:32:21:1d:5f:99:ea:9e:22:9f:c3:c2:bc:30:
42:30:b1:be:5e:f9:7f:c1:84:82:3c:c0:e3:33:a9:d2:83:d1:
35:06:96:2d:d0:87:17:d3:c9:93:47:8b:35:f3:ff:65:e5:12:
5d:94:3b:fe:66:27:00:c6:e4:16:5f:df:5b:5d:a1:10:7d:66:
da:59:40:a4:90:aa:bf:a1:ba:3d:2c:f5:ac:ae:5c:70:f5:f5:
70:c5:31:55:60:89:77:b1:f0:6b:84:6b:34:5c:35:f6:07:7c:
d6:26:9b:4c:1c:ce:ed:31:8b:40:0c:51:47:63:33:03:7d:3b:
9c:d9:ed:40:c1:54:e2:9d:9b:d9:d7:9e:23:23:df:0e:03:12:
ed:14:c2:b0:8a:58:d2:a2:26:ea:2d:f2:b5:ed:e4:2c:63:b5:
a3:45:d2:70:69:5d:38:3a:1e:06:19:7e:e1:17:83:c0:b5:f2:
06:fc:a6:14:9b:60:80:ab:7d:ad:dd:35:14:c2:d3:38:30:15:
de:b6:7c:c7:37:61:81:60:ab:53:87:cf:3c:4c:8a:81:a3:78:
b1:b4:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:10:45 2024 by rpki-client on console-ams.rpki-client.org