Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer (raw, json)
Hash identifier: LwNJnX/ARhI9XLCgrvnRK9hA7GZiu0pzTGbLeDqflR8=
Subject key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAFBF2F4F2FDD5C18ECB5A049AEC80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198023
IP: 178.239.0.0/20
IP: 185.60.184.0/22
IP: 2a04:e600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fb:f2:f4:f2:fd:d5:c1:8e:cb:5a:04:9a:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:bf:ed:92:c0:78:7f:bd:dc:97:52:ad:25:
af:a7:50:80:0e:3e:be:e5:15:5e:e7:8f:21:a3:59:
38:74:f8:27:6b:3a:a7:68:28:7e:a1:38:37:1a:34:
39:54:bd:49:c3:2e:a4:ea:3d:92:69:fd:80:7d:dd:
0e:5c:f0:8c:23:f8:af:c1:ed:ed:bb:b2:58:bc:0c:
be:b6:66:df:81:af:40:0e:96:4c:88:87:f3:14:ca:
b8:8d:54:be:3d:9d:04:05:bd:00:3c:1e:63:5b:8e:
7a:ef:6b:fc:68:0c:08:6e:65:3f:86:2d:d1:4a:76:
a9:f5:d5:88:9f:fd:51:5d:06:8a:5d:e7:df:74:1b:
40:08:ee:71:7a:d8:a0:29:9f:84:26:33:e9:5d:00:
e4:8d:43:bf:7c:40:45:5a:0e:95:0a:b2:64:6c:c3:
fc:c8:a6:f2:c6:45:c4:f7:55:63:75:58:54:cb:58:
5b:34:08:16:69:cb:77:1b:3f:14:5b:ec:c1:1b:27:
ed:95:12:e6:4f:a0:d8:ba:3b:d8:0e:bc:0a:ec:64:
6a:25:ff:a8:2a:27:c0:ea:b9:79:b7:2c:e4:9b:a1:
55:d2:c3:2c:b5:68:07:a9:0c:64:94:d1:bf:4c:b7:
39:4a:4d:70:9d:ed:fb:1d:e8:ae:ee:fc:5a:08:e4:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.0.0/20
185.60.184.0/22
IPv6:
2a04:e600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198023
Signature Algorithm: sha256WithRSAEncryption
21:1b:16:11:90:1d:37:e5:89:eb:f3:e5:dd:bf:ae:04:86:db:
61:c3:9f:13:5f:58:7b:a7:2d:19:92:3f:2c:29:c0:86:be:9c:
27:2f:0b:be:43:d2:29:1d:fe:c1:55:3d:7f:0c:25:49:f0:cc:
83:7c:4e:38:12:2f:ee:c7:16:3a:24:89:e9:57:61:6a:fb:22:
1f:ca:bc:2d:f1:16:47:b1:5f:4f:1b:90:cc:b3:d7:fd:4b:b4:
d0:6e:b5:41:e5:22:f8:b3:d2:58:08:0b:a4:96:b4:6e:7a:e9:
fc:89:b1:7b:d1:6a:f1:08:06:49:4f:65:df:6e:8b:6f:cc:72:
2a:b1:75:86:06:29:6a:46:b6:64:70:aa:23:ff:99:b5:e7:18:
e3:f1:b7:5e:3e:4a:cc:cf:fc:f9:c7:20:15:d6:8f:b1:a4:f6:
d4:39:17:bf:5b:b3:a0:42:4d:16:bd:c2:fc:5a:64:1a:ea:bd:
aa:34:f8:ec:fd:43:bc:69:04:94:cb:0a:b4:68:f0:b4:1a:4d:
ce:ba:14:cc:ca:06:17:57:7f:f0:27:2b:d7:6c:9c:e5:46:22:
9d:4e:dd:5f:3c:3a:26:b6:35:3a:40:60:8c:55:3f:00:13:48:
53:a3:8a:13:94:65:d9:51:02:fd:72:c5:66:57:1e:33:5c:4b:
03:62:58:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:05:08 2024 by rpki-client on console-fra.rpki-client.org