Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer (raw, json)
Hash identifier: 9RgdnIOMfvlyCYh7/PePlaG5U8pU1CHuojsbrzETkUo=
Subject key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF0CACC5D8BB364864D9FB507BAB2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206121
IP: 146.19.144.0/24
IP: 178.212.229.0/24
IP: 185.177.100.0/22
IP: 2a0a:2d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0c:ac:c5:d8:bb:36:48:64:d9:fb:50:7b:ab:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:b3:e0:dd:44:a8:f6:90:ae:a9:8f:bb:b2:
05:0b:5a:b3:47:50:4e:ea:0a:6f:e3:8e:96:88:8a:
b3:67:0c:14:f5:ad:79:7b:d0:b6:7e:c2:e8:cc:4a:
db:f6:42:f1:db:e1:88:93:24:5c:95:ce:b4:7b:3d:
fa:02:d4:57:de:47:6e:a7:5f:99:b4:a6:c3:5f:10:
4c:3d:2d:0c:6a:a7:6e:a4:b1:d4:2a:b7:49:36:14:
d1:a9:49:d8:74:f6:6f:5f:73:d6:cb:24:e7:38:91:
97:1d:15:9a:dc:92:79:a0:a0:9d:3e:3a:1c:ca:b3:
7a:a7:92:7c:4d:3a:22:d3:a8:83:07:e9:e5:8e:88:
68:34:b5:53:8f:4e:42:2c:af:52:0b:b7:7f:0f:10:
6b:91:47:fb:e8:1e:e0:37:d0:3e:a7:04:c3:af:03:
ef:14:5b:6c:49:1e:de:e4:83:f6:1c:7b:9b:50:c9:
89:96:23:e3:3a:06:a5:b0:af:a9:a1:b6:ca:1a:33:
dd:15:14:fd:ad:19:3e:3c:5f:71:ab:bc:ca:3e:20:
83:42:97:c1:28:a2:7e:90:c1:23:f4:5e:07:75:f9:
9d:6b:52:12:dc:11:64:4c:c2:79:63:51:3d:f5:97:
15:61:86:60:e0:ee:45:67:d2:0b:90:54:2e:93:da:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.144.0/24
178.212.229.0/24
185.177.100.0/22
IPv6:
2a0a:2d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206121
Signature Algorithm: sha256WithRSAEncryption
90:f0:99:f1:aa:c3:d1:a8:77:fb:3f:c7:ed:14:91:be:c0:ff:
f2:f8:49:be:66:ac:7a:67:1c:36:e9:57:d4:f1:5d:bf:9d:19:
35:bc:03:db:ba:bc:48:00:5b:cc:7c:e6:ca:9a:64:12:fc:70:
3e:4d:d8:3d:51:b7:01:e6:bb:50:39:4a:f7:a7:25:25:12:fd:
0b:a4:ea:e4:8b:91:4f:fa:9f:c1:8d:ad:d6:39:67:68:a5:d5:
40:5b:31:9a:ad:df:89:fa:3b:14:0b:86:11:a5:60:81:e2:0a:
af:c4:87:a4:52:1f:64:51:57:4b:56:f8:6c:32:dc:bc:10:cf:
29:e4:d6:2b:3b:b8:2b:aa:8a:86:37:f7:36:74:7e:8d:3c:f3:
25:44:43:c8:0e:f8:ea:28:23:83:1a:db:b2:24:24:a2:b8:ff:
9e:e1:f3:d9:f2:d6:27:ec:6f:60:cc:af:5b:29:e2:d1:c7:d4:
50:7b:1d:0d:46:91:01:e6:64:0e:d3:69:81:bc:eb:6e:e7:eb:
c1:c4:f3:bb:48:08:85:d7:27:7a:7d:cd:6d:6c:7d:18:00:a5:
30:67:36:91:46:03:42:dc:dc:ce:71:4b:84:a8:7e:75:ee:28:
49:bc:83:04:bf:d9:46:9b:75:7c:02:76:26:a6:e5:db:08:af:
8f:1d:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:57:21 2024 by rpki-client on console-fra.rpki-client.org