Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
File: 9O9duhAKkrJETz5RLQGlksAZUcI.cer (raw, json)
Hash identifier: hM3xphQ4IL4fPe55ZlhzQaBEFO4TLmD/N5uf+p2L09c=
Subject key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6E91E349390322BF82EAFF25A0A4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57558
IP: 45.129.248.0/22
IP: 45.148.212.0/22
IP: 185.15.168.0/22
IP: 185.197.8.0/22
IP: 2a03:b140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e9:1e:34:93:90:32:2b:f8:2e:af:f2:5a:0a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:f8:f0:86:11:fd:41:5c:d1:d4:78:37:69:
35:f8:72:e1:97:12:e4:ea:a9:17:6c:3b:01:39:32:
bd:82:92:7f:23:c9:4e:d4:3f:b6:16:df:81:3b:6d:
d3:f2:6a:62:3f:cb:51:e1:63:be:ec:33:65:33:02:
eb:dc:e5:df:6e:ea:25:8d:df:96:12:ba:ce:b1:d1:
18:66:6e:6a:8e:f3:08:c0:62:89:3a:5f:fd:91:84:
5c:7c:63:bf:d5:f3:b0:1b:41:22:c4:39:d3:85:f9:
1e:30:b3:14:44:59:41:f3:8a:9a:95:cd:e8:e6:07:
07:3f:e9:7e:85:5a:32:2d:99:63:6e:08:ca:80:82:
b8:42:c8:cf:05:62:f9:a0:14:ba:09:fc:f2:96:8f:
76:75:e8:fc:8b:6b:85:a9:91:73:f6:de:74:28:32:
3b:96:d8:83:52:70:64:ef:d8:e7:81:b3:38:14:31:
6b:d9:60:cf:32:9f:e9:ce:18:67:d5:85:6d:01:22:
1e:31:76:72:9e:dd:8a:24:7f:90:0c:8d:6e:99:25:
50:64:74:c6:0a:9a:4e:53:18:35:ed:9c:ea:65:3b:
36:99:1d:df:e5:e7:a3:92:72:c8:19:5f:ee:bb:4d:
cb:15:ae:49:56:fd:c2:97:47:5e:99:e1:3d:98:e1:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.248.0/22
45.148.212.0/22
185.15.168.0/22
185.197.8.0/22
IPv6:
2a03:b140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57558
Signature Algorithm: sha256WithRSAEncryption
43:4a:93:f8:bd:af:92:4a:db:7f:dd:30:8c:8e:0b:a0:65:d1:
7d:3d:ef:38:ca:51:4b:e6:a4:2a:8a:3b:e7:81:a4:b5:91:d7:
ea:1e:ec:92:f8:75:4c:f0:f1:5c:78:25:a1:87:30:91:9c:ae:
f3:bc:db:29:27:3f:bf:e0:12:10:e7:a5:03:e9:50:67:0b:46:
8f:b5:ca:7c:3c:50:75:58:9d:91:e1:a1:b0:c2:cb:2a:90:af:
24:1e:7e:aa:3c:78:07:64:be:3d:98:de:f5:1a:1d:cf:76:d5:
34:a2:4d:82:6b:10:1a:a6:eb:fc:40:d0:66:5b:69:76:80:7e:
46:d0:3c:a3:9e:49:94:3d:24:1e:b6:ce:5e:a2:8b:91:3d:4c:
d3:c6:47:a0:1e:d8:95:5b:6c:e5:d2:d6:7e:02:31:08:dd:db:
c2:1f:15:14:83:4c:68:56:13:91:42:77:69:b4:6b:32:40:4d:
76:29:8d:44:0e:1c:ce:c8:55:8f:7d:0e:48:19:be:e5:90:4d:
5f:38:6c:9a:fa:9c:f3:d6:dc:5e:f3:dc:f3:c8:b0:53:92:e0:
93:f4:ad:30:e5:1d:06:90:6a:fe:ce:28:96:d2:19:4f:d0:a5:
57:5a:55:ef:be:84:e7:9d:62:50:64:e7:6f:7f:5a:88:96:58:
03:b6:b2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:50:19 2024 by rpki-client on console-fra.rpki-client.org