Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
File: FYlivF2icS8gj8ixXr3CRq9Mvs8.cer (raw, json)
Hash identifier: LO7w+pk9Ef11//clc5rchJA3BXMnCztJ2tVeb3x1Wv8=
Subject key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEB100B7C8AC38DF932F67B34A357B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203969
IP: 185.110.152.0/22
IP: 2a06:5880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b1:00:b7:c8:ac:38:df:93:2f:67:b3:4a:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:ff:29:59:2d:91:50:33:42:5e:21:c6:e2:
36:f2:77:28:30:63:25:0b:83:14:e3:e2:85:6f:d8:
fc:27:d8:74:d1:af:75:45:21:64:da:cf:30:cd:51:
1d:db:c1:2a:8f:d5:a4:e4:6e:c7:98:aa:24:97:42:
6d:e2:57:d9:57:e3:9c:10:e1:d1:ee:c6:13:e8:87:
f1:83:c4:6b:d9:91:83:5a:fa:79:1d:d6:cb:86:63:
d5:75:8f:6e:ba:c3:0b:1b:3e:e1:90:8b:99:79:4e:
6b:20:50:3b:be:a9:a2:b5:58:f2:48:60:34:7b:2b:
0b:95:1c:2b:9e:24:7e:45:32:08:73:f1:69:bc:54:
cc:e5:0c:4e:62:21:ac:7c:88:84:40:4a:42:40:ee:
57:5e:d3:8e:f0:1a:4a:ad:7e:93:70:be:92:a5:d6:
94:06:ab:fd:4b:89:eb:a6:fa:f2:91:28:61:a7:f4:
fa:81:6c:aa:81:ba:c1:f2:a4:9a:fa:09:6b:11:5c:
7b:e1:9c:20:1b:8e:d3:00:45:16:c0:bb:92:a7:dc:
57:b1:ef:bc:c5:2c:1a:f3:14:e0:cc:ab:94:cf:2d:
46:bd:12:08:bd:6c:87:de:de:61:63:c2:9d:04:19:
4c:81:db:2e:cc:00:0e:7e:ba:69:74:c2:6f:58:f2:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.152.0/22
IPv6:
2a06:5880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203969
Signature Algorithm: sha256WithRSAEncryption
1b:29:90:67:67:91:7e:f3:81:16:61:24:e4:c1:95:2d:13:29:
02:9f:95:de:21:07:1f:6f:1b:b6:70:f2:4f:84:6d:d7:fe:22:
5f:ae:62:89:5e:7b:38:52:b0:a8:a2:af:0d:81:7a:04:8a:8f:
14:19:34:6b:da:3a:3b:81:75:c0:9f:15:fc:69:93:bb:af:c9:
20:69:28:f1:2e:61:28:d5:a8:39:54:af:e2:50:4a:2a:d1:f9:
76:2a:02:a9:b1:61:1e:53:a5:06:95:10:64:40:92:e0:ce:95:
ff:cb:7f:b6:83:42:a0:46:1a:b8:f2:57:6b:4c:0a:02:78:3c:
05:5b:1d:05:01:eb:32:aa:fb:86:60:18:f3:bc:2a:bf:82:ab:
60:31:86:df:4a:a3:73:27:ad:52:41:f1:0d:de:ef:4f:e0:13:
54:dd:67:3b:4d:10:50:4f:f0:23:52:2c:e4:d3:93:a8:e9:6c:
e5:3d:ce:9b:bb:8a:ff:76:e0:67:f1:4a:b4:77:e5:d0:d7:44:
b9:1e:1d:72:ff:24:04:39:f7:62:f2:36:3e:00:b8:d1:cb:c4:
4c:47:b0:89:f9:11:89:39:64:f6:9a:05:3b:8f:56:39:d9:65:
67:73:8f:ad:97:27:60:d1:4f:ee:96:3c:58:8c:9a:cd:42:5e:
c7:32:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:21:21 2024 by rpki-client on console-fra.rpki-client.org