Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.cer (raw, json)
Hash identifier: ysTKTlp4gw4XOHOBHqZZLCN5ZpBNbWETxJI8XWL/j00=
Subject key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8012156F9CB581FC3DC3B5C0BAA365A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205269
IP: 185.247.216.0/22
IP: 2a0d:cd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:21:56:f9:cb:58:1f:c3:dc:3b:5c:0b:aa:36:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:01:87:40:59:72:8d:cd:ea:ea:ea:b2:ab:
74:e9:57:35:fb:ed:20:8f:a8:8f:14:e3:8b:99:1c:
fa:ae:91:b8:0b:6d:16:b5:1c:e3:af:83:e8:c4:db:
08:95:ec:7c:e7:1e:80:86:69:82:ac:57:81:6c:18:
40:71:18:a4:bd:ed:21:5a:5c:22:c8:c0:2c:b5:35:
0c:5d:d5:17:67:dc:84:ee:9b:7e:af:3b:19:01:37:
2b:69:ed:ff:d2:d0:e0:59:60:c9:79:20:f2:69:e9:
ca:4e:e7:66:11:11:f1:3d:9e:fd:ca:62:a8:b0:e7:
8b:c9:f7:7c:33:8c:c9:53:ed:36:dd:61:9e:f8:1f:
15:47:74:0e:6f:3e:0c:fc:62:a7:f2:10:b6:e8:3b:
01:b3:04:c7:2a:27:2e:6d:22:2b:1e:ec:d3:ff:1f:
a7:80:e5:f1:28:e5:7e:a7:45:37:25:4c:67:ee:e6:
ab:86:8e:e1:39:9d:26:b2:a1:da:bb:2a:f8:91:f5:
e7:fe:ae:e5:8c:b9:18:fa:78:0f:1d:78:f7:2b:e1:
d5:3a:07:4a:a6:84:8d:21:68:48:da:86:4b:68:c4:
74:c0:06:8f:bb:12:1b:4c:8e:e7:b4:aa:75:83:b3:
53:3d:ed:8d:25:2e:43:a2:7f:5b:81:61:8a:cc:d2:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.216.0/22
IPv6:
2a0d:cd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205269
Signature Algorithm: sha256WithRSAEncryption
28:fa:c3:ca:b5:5b:f7:ea:e1:4c:b6:cc:3a:d0:b5:3c:b7:61:
c1:30:0d:50:1c:5e:2a:95:4b:58:0c:7c:83:ab:bd:67:56:6b:
cd:54:6b:c0:89:99:99:32:a4:13:b5:1a:a5:c1:de:14:b0:53:
eb:55:4a:ad:e1:bb:af:b2:d6:cc:a3:3c:fa:23:70:af:75:bf:
ca:99:ea:ec:ec:2f:67:d6:be:12:c9:20:71:63:12:f7:a9:ef:
71:23:22:1f:ce:6e:f7:81:ef:e5:6f:11:8c:15:c4:8b:0f:af:
f0:cb:ae:36:a1:f5:dc:76:df:6e:84:52:f3:bb:8f:d8:d0:71:
2f:a5:3b:bb:03:63:37:0d:96:86:13:43:84:38:a2:fd:af:5d:
8f:86:5f:fe:15:a5:d9:dd:4b:39:2f:02:6f:0f:0c:b5:fd:6c:
4e:a7:dd:9d:af:c7:37:0c:21:7e:cd:60:f8:10:34:f6:6d:e3:
8c:e6:e7:ad:d3:93:7f:53:76:fa:d2:ea:51:1a:75:50:77:ab:
f6:fa:8d:c6:a6:67:ae:d7:41:c8:39:a4:62:12:c8:92:91:b1:
83:e0:ed:3b:d4:05:10:0f:6f:03:0d:4d:fc:f1:57:84:1b:c9:
75:0a:42:c2:f9:3b:f7:bb:49:71:18:67:b3:85:79:90:10:21:
49:1b:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:48:27 2024 by rpki-client on console-ams.rpki-client.org