Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
File: Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer (raw, json)
Hash identifier: z50Ej+ZGT+kYcjFcUuNXrQGb3Sa+h+YZWihWJRnO3eI=
Subject key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019252457C44ED9490C6FCE5597D5DBF33D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Oct 2024 12:05:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8502
AS: 202914
AS: 205510
IP: 84.246.240.0/22
IP: 89.47.11.0/24
IP: 91.196.188.0/24
IP: 91.210.56.0/22
IP: 141.98.12.0/22
IP: 185.121.172.0/22
IP: 185.150.196.0/22
IP: 185.215.248.0/22
IP: 2a06:9fc0::/29
IP: 2a0d:3e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:45:7c:44:ed:94:90:c6:fc:e5:59:7d:5d:bf:33:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 12:05:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:1c:5d:7d:4e:f7:d3:5a:ed:e6:4c:1d:f0:
df:d7:fe:bb:09:44:e8:ed:65:6e:47:c3:86:b9:0d:
f1:5c:1b:fa:81:cf:6a:22:3d:b4:81:21:bd:ff:7f:
90:5f:37:c1:87:28:db:e8:4d:1f:6c:17:d7:68:4a:
f3:c1:d9:55:bd:bb:f2:0d:f8:dc:fb:a0:0b:b3:61:
eb:a2:e0:05:bd:1a:16:36:72:dc:35:58:86:ca:9d:
f6:c5:48:1f:a0:4a:9f:af:d4:e1:18:21:6e:c9:0d:
b0:fd:f0:54:b9:46:d9:09:d4:d6:a9:83:85:f8:6e:
c0:22:fd:bc:7b:20:f8:25:98:f8:08:1a:95:76:02:
af:a1:dc:ff:3a:d9:de:0c:f6:86:c4:56:45:67:8d:
de:82:1f:f0:26:ae:5c:dd:15:0a:dc:9a:9a:2e:98:
b1:77:f6:54:9b:e2:f0:26:30:78:fc:08:37:c3:12:
22:fa:84:36:4e:ae:ed:d3:0e:d1:0e:1f:b2:5f:a3:
7d:9e:53:32:b0:af:83:55:68:67:f0:ab:20:f3:b7:
75:86:b8:a0:31:56:4c:14:11:3a:28:f2:af:2a:b6:
52:02:12:4c:82:07:62:62:17:f5:86:2b:bb:75:5e:
7e:54:12:5d:bd:e4:f5:1a:2c:4a:68:59:af:42:80:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.240.0/22
89.47.11.0/24
91.196.188.0/24
91.210.56.0/22
141.98.12.0/22
185.121.172.0/22
185.150.196.0/22
185.215.248.0/22
IPv6:
2a06:9fc0::/29
2a0d:3e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8502
202914
205510
Signature Algorithm: sha256WithRSAEncryption
6c:91:6d:fa:8d:b9:55:d3:6b:a9:3a:b7:1e:81:72:80:16:a6:
64:8f:b8:b9:a7:4d:41:49:54:a2:ac:98:3a:ff:7c:32:37:11:
32:c2:78:c6:06:8e:f4:94:e6:ca:41:48:cf:e0:5b:dd:d1:5e:
46:ff:19:9f:ed:91:ae:54:cd:c2:e7:13:19:5e:72:2e:07:86:
5d:e4:70:08:0c:19:31:40:71:38:2c:3d:82:19:c1:3b:ed:a8:
17:92:d5:da:cc:c4:a6:5e:8a:02:15:b5:a8:e3:b1:15:d6:b3:
a5:ae:6e:20:64:2b:f5:4e:a0:48:6e:f0:fa:b1:c7:9f:b6:d6:
16:ae:fe:7a:ab:06:c1:c2:9f:24:36:03:9d:89:f0:7e:72:ec:
86:91:54:49:03:8e:fb:9c:95:e9:d5:aa:6a:11:86:72:f0:88:
83:f7:bd:73:1d:66:e0:f3:4b:28:1a:6f:d9:49:61:91:2e:25:
cd:86:50:6c:eb:c0:dc:e4:08:9d:bd:9e:cf:a1:0f:3c:bd:ec:
d9:24:0f:13:a4:6f:90:25:3c:bb:b3:c2:b5:40:82:c4:37:f5:
c8:72:2c:66:73:23:b0:c6:c9:18:ff:8e:d8:31:1b:e3:e0:8a:
c1:8b:20:d6:5b:ba:f7:f9:67:fb:a9:bc:d2:fb:d9:cb:e8:ec:
4b:cf:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:16:08 2024 by rpki-client on console-fra.rpki-client.org