Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer (raw, json)
Hash identifier: DpbA1r0j0h7DaaXNYI16OZDBkhwLuS2G99iIWBvlgZ4=
Subject key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42482BA9BFB8F7D93A184D94FA80822
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59819
AS: 61266
IP: 185.10.244.0/22
IP: 2a03:6940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:82:ba:9b:fb:8f:7d:93:a1:84:d9:4f:a8:08:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:6b:c4:d7:0c:f4:b2:4b:46:f1:a1:96:39:
e5:64:f6:61:7b:c0:c6:2a:34:e3:c4:e2:7c:a1:b7:
be:45:ec:c0:6b:d1:9a:c3:bd:5c:fb:08:c1:ce:1c:
4d:29:3f:57:69:c7:6e:2d:af:40:46:d8:89:d6:86:
6a:18:81:78:0f:52:4a:85:da:b2:99:fe:67:04:b9:
29:18:84:4a:99:f1:c8:67:90:6e:d4:1b:82:19:c3:
7e:c3:e7:75:f1:ec:60:85:ba:57:ad:8a:f9:b4:e7:
9c:66:73:1d:68:f0:d4:3f:01:86:4f:f0:64:3c:d9:
19:2b:f4:aa:a9:29:a2:02:a1:5f:f4:3c:2d:bf:07:
6e:99:b7:8c:5e:49:a1:b4:be:54:8e:21:82:6a:fb:
ae:73:1a:f8:d5:b5:88:ed:ac:e0:cd:92:62:f0:5f:
d8:23:fe:f4:78:fd:5e:ca:fa:29:f3:66:8f:44:de:
6c:7b:0a:93:e1:56:c8:d9:28:ed:37:71:58:59:5c:
b1:f4:7d:ac:a8:b3:d4:ad:68:ab:6f:fa:fd:87:9a:
ff:f8:b4:a3:2a:36:3c:82:1c:32:4e:7f:32:3f:16:
b1:c4:39:57:00:02:02:42:87:05:eb:98:a1:ae:11:
d1:75:38:40:a9:0c:f6:a8:ad:6f:1e:3a:56:70:29:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.244.0/22
IPv6:
2a03:6940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59819
61266
Signature Algorithm: sha256WithRSAEncryption
ab:66:b2:02:68:06:2b:bd:ca:51:a6:85:9a:2a:62:a9:25:e7:
ea:bf:46:82:79:ac:38:5a:6e:88:0c:58:b9:42:a0:e5:b3:53:
b1:ea:eb:84:38:b9:28:eb:96:74:5a:09:80:db:d7:ed:28:a8:
85:30:13:35:7e:04:93:e0:76:ae:74:7f:4d:22:a8:0e:ad:91:
cb:54:b0:76:cf:88:d0:a2:70:f6:80:11:3a:c2:66:33:c0:f7:
f9:34:c7:9e:22:3d:52:bb:9a:50:e5:e6:e6:9e:4c:70:76:c5:
f8:a0:7a:7d:64:22:a6:fb:f5:a3:0d:34:8f:f4:b5:35:76:88:
e4:ea:79:1d:a6:fe:a9:cf:a2:9c:cd:01:53:73:bd:d5:c0:09:
ca:9a:e2:fb:31:b9:b8:a5:03:0d:7e:a9:6a:a1:20:3f:58:45:
8f:ca:39:42:33:c1:64:2f:d6:2b:94:bb:c0:1c:2b:27:21:3f:
4b:12:83:f7:36:50:45:7b:ba:44:e5:2e:c5:ff:64:30:a2:9b:
a0:9b:f4:df:39:a8:37:38:9a:a3:5f:81:ee:db:25:b8:51:2c:
9f:4f:99:42:c9:43:e6:7c:f4:95:6f:c7:6f:50:19:3c:44:5f:
de:f3:6e:ea:d9:62:07:54:ea:0c:3b:1e:3c:38:3c:b5:99:81:
d6:18:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:54:35 2024 by rpki-client on console-fra.rpki-client.org