Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
File: CfDczrdPEYWs2XruqsJd2l6bCTY.cer (raw, json)
Hash identifier: PbKqZZjnEvadCRjPYzJDtg5LfZQabshHOw9D0KrPKO4=
Subject key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29FF15125FD3C174185A1B77D5CE2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198218
IP: 82.205.134.0 -- 82.205.201.255
IP: 164.40.160.0/21
IP: 178.248.112.0/21
IP: 2a03:d080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ff:15:12:5f:d3:c1:74:18:5a:1b:77:d5:ce:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:c8:4e:bf:5d:d6:5b:80:90:86:07:e3:04:
11:4d:d7:2e:00:ed:85:94:9b:9e:e3:ed:d4:0b:53:
b9:89:c8:2b:96:3c:3d:f1:fc:eb:40:16:6e:f4:9d:
7e:b4:93:78:b9:4c:7a:45:2f:c9:aa:54:57:17:ef:
13:c8:5a:b5:5a:78:01:89:4e:1f:58:f8:fd:a0:6c:
da:0f:ad:46:c8:e7:ba:3b:b0:72:14:5d:14:a1:1c:
c6:a8:c5:07:8f:e6:74:09:8f:a3:09:28:d9:d6:1c:
f6:0d:ba:db:9c:af:af:d8:1c:5c:22:b5:1a:3c:a9:
13:37:88:7e:ae:1a:b0:4b:64:cd:c2:8a:50:6a:0e:
59:2f:62:7f:e8:cb:a9:bb:59:2a:9d:19:11:ec:f4:
91:3f:c7:71:b5:b4:b9:ee:65:29:8f:19:e4:9f:bc:
b7:1d:7c:db:e2:8a:3f:37:6e:5e:5b:f0:ec:12:e0:
a1:87:e8:14:85:8e:e4:01:af:9c:03:ea:ee:a0:69:
62:b7:67:84:98:ef:62:ce:52:09:dc:a5:0e:91:9b:
1b:78:68:45:ca:4b:f8:4f:81:8a:9a:d5:db:51:9c:
c4:e8:03:ed:07:73:a3:2d:8f:d1:d3:53:0f:18:b8:
44:2d:a7:85:dd:ad:f6:e2:c3:82:6d:39:80:65:83:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.205.134.0-82.205.201.255
164.40.160.0/21
178.248.112.0/21
IPv6:
2a03:d080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198218
Signature Algorithm: sha256WithRSAEncryption
39:c4:0e:1a:2b:3c:30:f5:e6:94:6a:a3:5c:77:2b:de:78:98:
72:c8:d6:c7:a9:d8:5e:ec:ad:41:31:ec:fb:52:9e:28:87:7b:
5e:62:13:7e:1b:19:c0:2e:33:6c:28:60:75:be:3f:9d:40:ed:
41:3b:f4:f1:15:a3:e2:09:ac:bf:be:e9:2a:81:3f:cb:79:52:
fd:f9:13:78:c9:a1:81:01:95:64:dd:3c:37:10:22:af:81:c1:
ef:22:d1:2c:d2:3a:94:8d:00:c0:68:7f:81:77:27:24:3a:4d:
6e:3f:b2:bb:ad:0b:18:0a:64:2d:cb:54:55:03:34:89:ff:af:
ce:24:a7:9c:36:ec:d3:99:b4:26:a0:33:d6:67:f6:ae:5c:e9:
28:59:a4:92:3c:fc:07:4c:12:9c:a1:51:e0:8c:42:6b:e8:42:
50:53:3d:a4:85:62:a1:19:af:ce:d0:81:76:c4:49:5a:1d:e4:
dc:6a:ce:28:67:ff:05:37:04:04:87:e4:ff:d4:a4:59:fc:91:
a5:51:55:7e:93:95:8e:de:d3:71:32:b9:d3:fa:22:10:32:49:
6b:38:b3:d5:a5:42:07:ad:f8:f7:2d:8f:e2:3f:45:94:61:90:
a0:47:e1:90:cb:cc:e5:7c:9f:b1:c7:1f:10:a3:ff:2f:9a:8a:
0c:7a:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:03:01 2024 by rpki-client on console-ams.rpki-client.org