Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer (raw, json)
Hash identifier: XWZAwE+E/PM16CJZrOVn7VXh4LhwqJhUrvfnQdDHy5Y=
Subject key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4937958D0B2F683BC551698D1857E3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203015
IP: 91.213.103.0/24
IP: 193.23.176.0/22
IP: 194.50.33.0/24
IP: 2a0c:82c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:79:58:d0:b2:f6:83:bc:55:16:98:d1:85:7e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:fb:df:e2:f0:ac:9b:22:f5:ab:c5:98:10:
85:19:61:2e:93:ac:f7:6e:f4:80:00:f7:c2:f6:23:
c2:1f:fb:c8:9b:80:d0:38:48:b4:ae:44:7d:b1:aa:
d4:66:d9:e2:e5:3f:e1:b4:aa:65:b9:10:8c:88:65:
12:dd:58:38:09:d3:29:d8:d2:1a:ce:83:32:f9:93:
5e:36:58:8b:cb:a5:2c:9c:c0:e5:a0:77:c3:ec:bc:
07:d2:1c:d6:e3:07:cf:40:d5:0b:92:af:c6:ba:6e:
f5:8b:14:01:53:63:1f:c5:7f:2a:72:48:1f:9d:45:
8e:80:7f:67:ef:e8:2b:7b:26:e9:d7:b1:f9:b9:bd:
ae:98:92:27:74:ce:55:ba:bf:6c:33:81:6c:c8:d7:
af:18:2b:64:5e:96:07:0b:09:65:92:6d:23:87:98:
3c:af:5e:72:78:5b:bc:6f:13:89:49:14:2c:17:88:
c8:bf:03:4b:eb:53:0c:a6:a1:ff:49:93:95:0f:11:
50:7f:1c:f7:40:53:67:14:83:31:c4:f9:63:c9:4f:
c8:77:80:e8:81:80:6c:e5:8a:5e:81:eb:d7:74:8a:
d1:61:ba:73:93:46:29:08:b8:06:3e:5b:46:39:0c:
13:0b:91:00:b7:d5:7a:10:c5:97:a1:50:10:60:b5:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.103.0/24
193.23.176.0/22
194.50.33.0/24
IPv6:
2a0c:82c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203015
Signature Algorithm: sha256WithRSAEncryption
27:68:41:41:2f:b1:93:56:fc:80:a3:10:1c:74:23:47:ed:07:
3f:48:05:59:44:46:fd:cd:46:1c:27:dc:54:96:75:f2:77:30:
e3:91:78:09:65:9d:32:f3:1c:26:4b:b9:e9:73:36:97:5c:fe:
fa:c2:14:6c:b9:6c:e4:be:b3:99:1b:e2:02:a6:62:b3:53:35:
76:79:db:73:9f:87:ac:b0:d5:73:25:9e:0c:bd:d7:cc:de:3f:
47:70:22:45:d2:31:d9:b1:e2:91:7b:02:44:53:32:05:1e:85:
17:c7:08:3c:3d:fd:00:29:67:e2:ea:be:9f:bf:5a:94:59:a4:
b4:ac:e2:63:56:66:85:38:a6:50:ff:f1:6c:d0:bf:f8:8d:c3:
23:71:c2:33:9d:fb:5c:d1:ba:4a:2e:85:0c:d2:bf:f7:56:5c:
bd:1b:0d:a5:a3:d1:c9:dc:e9:b4:e6:b4:14:a1:38:60:4a:93:
38:c2:d4:75:b4:f8:7b:4d:28:09:57:4a:4d:c9:f6:5d:21:23:
f5:e5:19:f4:79:c1:1b:76:fd:90:47:b5:d0:2b:1d:b3:91:e1:
8b:0c:77:06:0c:7f:0a:2c:7e:c4:8f:53:9d:ef:6f:29:56:40:
78:df:55:52:6e:ba:7c:cc:a0:c6:ec:e6:30:b4:33:bc:ad:4f:
f9:4f:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:28:27 2024 by rpki-client on console-ams.rpki-client.org