Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer (raw, json)
Hash identifier: fJazLei7+14oVDlXKn9pdrmr6iM5H9ccGEDaeRxTA9M=
Subject key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9248ADAFFE6914B02382EE2E1E321
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202777
AS: 203764
IP: 185.124.148.0/22
IP: 185.235.141.0/24
IP: 2a06:ee80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:24:8a:da:ff:e6:91:4b:02:38:2e:e2:e1:e3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:40:9e:73:76:eb:64:85:56:62:51:d0:8d:
ee:56:33:13:98:73:2d:f2:ed:47:4b:73:da:9a:f1:
83:ad:d4:7f:72:7a:7f:60:e6:45:4d:a4:a4:6a:4d:
d6:d3:e2:7c:6a:11:c0:77:1a:f0:90:8e:7d:cb:97:
db:e9:a6:ea:88:4d:2e:d5:29:4d:9d:c1:05:9b:49:
1e:f0:cf:00:5c:df:29:04:c8:77:82:a4:8b:56:a0:
c4:db:47:ba:57:9e:b2:81:01:e7:1f:43:29:64:be:
8d:82:fb:a8:37:a1:a2:4c:4c:a4:c2:83:ce:52:ee:
88:63:26:13:1b:db:28:7f:fa:d1:aa:81:a7:5b:6f:
d3:4b:d5:d7:d9:52:7e:52:a7:67:56:26:5d:57:9f:
7f:fe:fe:00:1b:86:f5:6e:69:8b:b2:84:b1:54:80:
19:c2:6f:61:81:d7:ff:a6:9a:81:a4:a0:24:a0:a9:
1c:93:d9:0f:96:05:77:49:a2:e4:ea:7e:95:3c:91:
ca:04:8c:ea:b2:01:59:47:08:65:27:64:bf:98:31:
8c:e5:8e:ec:9a:00:9b:2e:be:17:f2:24:ce:01:31:
2a:3c:14:1a:8b:37:68:70:47:8c:bc:1c:f9:e5:17:
0e:e7:69:f9:56:d2:17:d9:b3:35:6c:ef:3a:b0:19:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.148.0/22
185.235.141.0/24
IPv6:
2a06:ee80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202777
203764
Signature Algorithm: sha256WithRSAEncryption
8c:ba:b7:2f:a8:40:91:6c:b9:4e:ed:1e:62:e8:a5:e2:84:63:
75:e9:b5:bc:85:37:3f:2d:08:e8:ca:91:f8:ec:74:56:44:5d:
9f:27:98:2d:6b:1e:1a:3d:e0:35:a9:41:8a:4d:88:fc:a5:60:
aa:e8:65:c2:7b:1a:ee:42:29:ab:c9:05:5a:b8:e3:e2:9a:38:
65:1d:50:d3:c6:a5:58:75:65:31:d0:37:f1:e1:79:44:3d:d0:
f7:79:b8:f5:8e:1f:39:75:1c:4b:77:6d:9e:1d:28:38:9a:75:
8e:58:2f:ab:d0:ca:8e:06:67:7f:01:e3:e6:3d:fe:bc:c4:3b:
bd:83:be:2c:b8:ad:99:57:03:d3:ad:33:76:96:fe:e8:4a:77:
09:44:93:4d:5a:36:7a:f0:26:c3:10:01:f5:3e:85:db:8e:2a:
6b:e7:b1:22:c6:50:03:02:ee:26:ad:b5:31:3c:e9:0b:c8:e6:
4b:69:e1:e7:75:01:38:23:a1:18:7c:e7:8e:63:93:80:4f:fb:
fb:11:7e:62:c5:35:27:c5:d4:bc:a5:1f:9d:66:75:73:b1:63:
ea:ad:35:7d:f5:38:9d:a6:be:ab:86:f0:c7:b0:ce:f5:52:ef:
91:96:05:ba:42:c0:49:44:32:14:13:1f:cb:41:70:a5:2e:be:
e4:6a:42:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:20:20 2024 by rpki-client on console-fra.rpki-client.org