Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.cer (raw, json)
Hash identifier: D2zzWXrvaQhKZW1FLT1EzFAiw+2brztrTsCR6DgEhlk=
Subject key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D79DA3BCAB0C218FC9506201F4EFAA537
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Feb 2024 15:19:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202648
IP: 185.158.108.0/22
IP: 2a07:ac40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:da:3b:ca:b0:c2:18:fc:95:06:20:1f:4e:fa:a5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 15:19:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f566016d878230128b58e279d661c195e6399588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:18:98:ba:d5:e0:76:d4:1e:61:f4:26:f7:
3f:6a:53:6a:12:02:7e:f5:bb:d7:2e:03:a7:13:51:
0b:00:dc:86:89:98:45:9b:fc:ce:2f:19:d7:04:6d:
5f:f8:a7:80:f9:8a:19:53:58:4e:96:4c:ba:3e:2a:
7d:f8:83:c4:eb:3e:fc:00:c5:25:f5:30:97:b6:55:
b1:d0:b1:38:73:15:f8:c3:a2:df:77:04:c7:4a:ab:
4b:8f:de:67:92:da:15:29:9a:b1:92:7c:fb:6f:0c:
3a:29:8a:9e:54:a3:4a:39:34:70:42:be:fc:46:83:
be:4d:66:9e:7c:04:12:39:c4:e1:74:c8:3c:49:6d:
9c:3f:cc:89:a3:e4:b3:f9:e9:99:df:bf:37:d4:fa:
73:7c:49:18:c8:7c:f0:89:e6:7f:86:f1:98:44:4c:
b4:75:ec:f8:09:d1:71:4b:bc:9c:8f:7f:fb:ae:9e:
30:5b:52:f3:7e:f5:b2:73:8f:5c:81:09:23:26:f2:
2b:64:98:5b:0a:5c:89:14:41:ee:75:8d:51:25:85:
95:93:e6:67:87:81:6e:5d:50:ae:c2:74:87:aa:1e:
55:e8:f0:8a:eb:72:b3:4b:f3:76:8d:71:4f:b7:3c:
b0:c0:53:c7:b4:97:3c:a0:f9:67:2d:d3:4d:0a:83:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.108.0/22
IPv6:
2a07:ac40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202648
Signature Algorithm: sha256WithRSAEncryption
a8:8b:f3:d4:04:aa:d3:8a:7d:71:4f:d4:8e:d3:c7:f8:d8:ad:
81:5f:88:3f:a0:47:6a:63:9a:ce:02:96:be:bd:b0:be:5c:4c:
57:1f:64:e8:cd:91:bc:e1:aa:63:18:ef:4a:44:8f:4a:07:51:
f2:bc:24:b2:c8:c1:c0:30:0e:2d:79:c6:62:5c:9f:d8:76:e0:
2c:bd:80:70:55:91:b5:f1:66:76:27:06:b0:c8:a7:54:71:d7:
fa:d8:70:39:d8:66:f7:29:3f:1d:a6:e1:41:00:8c:9c:9e:2d:
87:b5:3b:02:e3:f7:c3:d7:26:9f:36:5a:91:d6:3c:15:c8:0c:
e0:c8:4c:96:46:77:89:0b:e4:18:25:7c:72:93:ef:d7:14:50:
23:3d:00:3d:e2:a0:30:7d:17:94:38:6f:01:89:c5:2d:d8:2e:
01:db:c5:5b:1a:ef:f2:61:7e:e1:46:c0:d0:92:55:c3:34:8b:
ed:10:d1:99:c4:00:a3:a3:99:86:52:7b:83:cf:3c:ca:4f:7e:
81:8e:76:1e:ae:48:9a:2f:b3:dd:36:69:ba:e8:0e:03:53:bd:
ad:2f:0c:94:dd:c1:62:51:6f:a3:56:c3:50:a9:79:0c:49:d0:
6a:62:db:02:10:74:c9:d1:48:6a:09:19:05:bd:8d:10:7c:7b:
b4:d2:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:41:24 2024 by rpki-client on console-fra.rpki-client.org