Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
File: FV9JSb982s8-nUZXsIzYR4DUF0U.cer (raw, json)
Hash identifier: Qx7THYaEDoOWkgwZtglJ0kTqhxH0yOOJ2zxxbUaAacw=
Subject key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AAF66C645FF2A47B0A398C72369D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203376
IP: 185.136.200.0/22
IP: 2a06:ffc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:af:66:c6:45:ff:2a:47:b0:a3:98:c7:23:69:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:45:3f:71:be:f2:1f:13:d5:ea:ad:46:8f:
a4:61:30:4a:72:ff:25:7d:15:22:23:f1:eb:30:23:
10:76:f8:73:f7:7d:5b:2a:e8:75:c2:c5:3a:76:d7:
a9:6a:9b:c1:46:a1:58:99:ea:27:87:a2:63:52:5a:
6f:68:24:1d:02:2d:2f:7c:63:7b:6a:6a:99:be:dd:
1c:e9:18:ee:68:56:65:64:20:92:a5:38:4b:78:11:
78:0f:ec:a7:ad:1b:85:cf:c8:4a:b6:ef:06:f1:2d:
97:db:0e:26:01:fc:13:11:55:84:f2:b6:5d:e1:77:
78:9c:46:64:59:8f:02:02:ee:57:9a:c3:1d:12:63:
8d:fa:c7:b3:06:4f:00:bf:81:0c:db:ae:ac:f9:a7:
6c:80:73:42:c5:8d:49:e4:02:11:2d:ad:ad:68:d7:
38:c9:58:9b:d2:7c:b1:e0:c4:5f:8c:35:7a:b3:0a:
41:21:14:1f:b9:40:94:59:80:ef:92:bc:13:0d:30:
b7:5a:60:dc:fa:ac:14:c4:be:30:26:01:5a:33:d3:
df:39:87:62:2d:6b:f7:94:b8:25:0e:22:be:96:ad:
37:1c:40:cb:6d:f8:92:5f:4a:f8:d5:c8:85:14:d6:
54:c7:a5:eb:22:a1:b9:b0:ef:c7:f2:5f:d4:cd:74:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.200.0/22
IPv6:
2a06:ffc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203376
Signature Algorithm: sha256WithRSAEncryption
37:ae:78:4a:90:2a:64:87:c8:c7:0c:65:ce:76:c8:f2:09:d0:
ba:f6:5f:16:a2:5a:1c:cc:42:e0:2f:c3:6b:c0:68:b0:a0:9a:
14:e6:2f:df:7d:5b:52:27:ba:62:12:71:10:a3:2b:b3:c3:ae:
a5:69:c4:d9:ee:b0:53:12:b6:b3:07:fb:99:33:36:b3:d9:f4:
1a:95:ce:3b:4b:90:56:ca:9e:4f:86:02:5f:81:09:fa:a9:b4:
b2:af:ef:2c:cf:e2:45:12:80:f2:6d:4a:49:0a:b5:b2:af:fa:
de:ad:71:55:c9:b5:77:7e:c8:84:14:84:df:7f:20:c4:ae:05:
a4:cb:1b:9e:77:31:71:f0:67:85:5e:05:bc:c9:64:77:6b:71:
79:db:39:03:73:bf:25:ff:0b:b1:d5:45:0d:a9:6c:11:1d:b5:
57:44:17:d0:87:52:e3:a8:8a:98:90:88:fe:bf:9b:90:87:b9:
a2:63:4f:1c:84:14:79:d3:3b:44:95:4b:e4:d2:5c:d8:a6:2e:
ca:2c:c6:ce:f4:6f:61:b8:83:da:b8:4e:e9:e7:39:61:62:cc:
bc:21:89:78:de:0b:85:3f:3c:21:d0:e9:00:e8:e0:9c:38:90:
d8:df:b5:0c:17:31:c5:63:7a:1d:ba:00:73:cb:d5:54:98:57:
41:fe:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:25:57 2024 by rpki-client on console-ams.rpki-client.org