Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
File: CiKtYJcp-O8REq28FY9REhWw854.cer (raw, json)
Hash identifier: yZifPwm1FoiCPpIb3p37EtoTeQC0WjK93SmTB5beskk=
Subject key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FA1547E3B9A104AA351F3CC244A942036
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 May 2024 17:23:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214872
IP: 193.104.11.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:54:7e:3b:9a:10:4a:a3:51:f3:cc:24:4a:94:20:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 17:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:fa:d1:ff:0c:59:47:b4:55:fa:2d:e1:d4:
1e:be:92:a5:a1:1b:9b:d7:da:1e:af:02:60:02:25:
b7:08:8c:d3:a9:e6:29:5a:07:4c:89:36:92:33:48:
db:6e:64:5b:9e:6a:e8:89:b6:f8:5a:4f:95:b0:db:
f7:6d:91:75:eb:98:88:38:b6:b5:2c:4f:51:5f:48:
75:0b:2e:c9:d7:a1:aa:69:18:7c:63:5d:83:c6:63:
37:d0:90:1d:ec:8a:82:83:77:73:06:b6:bf:4c:3f:
40:e4:db:d9:f2:70:e4:07:39:ef:7e:79:77:37:ad:
00:32:bc:a2:2a:cc:07:ac:94:6b:cc:19:c7:63:b2:
cd:80:b6:5e:59:43:3b:2f:29:66:d7:a8:80:0b:b0:
8f:89:b1:c5:50:12:63:c7:8d:25:03:34:4b:5f:b0:
51:41:90:ee:9e:95:f8:dc:d3:ab:aa:a0:03:f1:9a:
b6:cf:fc:eb:7c:c6:8e:0d:36:56:d0:38:cd:a0:2a:
75:ae:87:03:bd:e1:78:97:2d:35:c6:e0:7f:24:59:
b0:3a:a6:4e:87:e9:7e:e3:b0:6f:2a:fa:d4:89:47:
0b:10:36:f7:5d:fb:39:a1:d3:d6:85:cc:a1:84:64:
2d:04:ba:a7:ee:53:5a:bc:f9:33:1f:bf:b6:55:bd:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.11.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214872
Signature Algorithm: sha256WithRSAEncryption
45:8e:7a:b7:b7:93:5e:2c:f1:5f:ee:f5:4e:6a:b1:f1:37:f5:
9b:81:02:ec:ab:5b:7c:d7:05:ca:fc:0f:0a:22:1c:f8:30:a7:
36:44:54:19:21:e4:92:50:70:c5:5e:bf:e8:db:27:71:f8:e0:
9d:13:5b:36:af:51:14:e3:1e:a8:8c:af:87:97:63:13:e6:8a:
e3:52:80:7a:ab:b6:3b:1b:4a:c2:a5:10:6b:46:b1:71:5e:90:
a0:a0:fd:68:b6:a8:37:3d:be:ac:37:24:4b:64:2e:64:3e:f8:
d2:2d:29:ec:2e:ae:8d:d7:db:ee:08:44:b4:86:a2:9a:32:b3:
f9:44:ab:76:b4:85:67:28:e6:dc:63:ff:24:a1:8f:6d:27:28:
3b:93:e5:dc:dc:f3:e4:a5:b6:56:83:7a:55:25:45:3f:c3:07:
90:e4:ab:49:e1:da:9b:ff:bb:42:78:56:2a:57:b1:76:31:47:
73:06:9a:09:47:a1:00:66:8a:b1:9e:7d:96:ba:e7:3d:72:7d:
e3:15:2b:5e:d3:e7:31:ea:09:b1:3f:0b:21:52:40:5f:3a:94:
7c:5d:a6:92:9d:a7:cf:27:b1:b7:7a:f8:c6:3f:11:33:22:a5:
45:d7:91:9a:5d:dc:d1:a7:8b:d5:89:15:18:56:02:aa:2d:cf:
6d:a6:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:59:23 2024 by rpki-client on console-fra.rpki-client.org