Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
File: FkThypMSunm-VZ4RyOoJEAYN1I0.cer (raw, json)
Hash identifier: es6LiDtmbNDBv4u1Zbbsu70zce1e1NnuBNGHs277IM4=
Subject key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72748D8BFC0F7F85A5755734E56F5EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203130
IP: 185.144.36.0/22
IP: 193.134.216.0/21
IP: 193.247.203.0/24
IP: 2a07:3e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:48:d8:bf:c0:f7:f8:5a:57:55:73:4e:56:f5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:d7:48:14:e2:90:a0:1e:0b:ed:52:d8:ad:
a7:7a:3c:8b:c6:ed:c7:f8:9e:f2:0a:5c:2b:e6:52:
2a:dc:71:2f:6b:48:6d:22:2e:20:43:a1:d7:ef:4d:
ac:8a:72:31:e8:e0:21:e5:0a:c1:6c:1e:8f:b2:fe:
c6:b1:60:20:f3:7f:20:53:dd:6e:f0:2d:91:1e:36:
79:36:1c:fe:bf:7f:82:8e:2f:99:27:37:16:5c:49:
4f:5b:bd:8c:e5:67:5e:a8:59:4f:3c:43:0e:32:46:
09:8a:a2:ad:52:83:63:5e:c9:f7:26:64:97:6d:80:
db:ec:27:20:2a:c4:e9:9a:f9:cf:e7:4b:d7:49:ea:
56:3f:7d:9b:b6:0e:73:e1:4d:3a:0e:6f:c1:34:65:
2e:65:fb:dc:5f:5e:fb:ab:09:f1:b5:c4:03:88:c2:
02:36:06:b7:49:23:01:ac:24:4b:5f:aa:69:e3:76:
95:76:52:a8:20:b8:6e:25:28:06:f0:37:07:5f:8c:
af:05:22:56:b6:38:33:12:2b:71:5a:52:26:99:8f:
06:0a:70:39:f7:21:5e:c5:52:42:2a:fa:b1:4c:d2:
c0:0a:b5:9d:2b:44:77:ce:7c:d2:d3:3d:ee:dd:1d:
e1:fc:ed:a0:b3:a9:5c:69:53:d5:93:db:31:b7:23:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.36.0/22
193.134.216.0/21
193.247.203.0/24
IPv6:
2a07:3e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203130
Signature Algorithm: sha256WithRSAEncryption
50:80:36:27:45:f4:97:77:de:34:87:6a:b7:fc:90:3a:c0:48:
3f:4d:a2:09:88:5d:d2:c2:7f:4b:d7:8e:4d:95:e5:a5:52:32:
22:bb:ec:bb:0f:83:6a:80:0e:44:38:29:2f:bf:ba:09:fe:80:
cd:46:04:72:ff:ec:e6:c1:30:d8:d9:57:cf:b1:59:25:0b:b4:
e9:ac:90:6f:4b:fc:c9:1e:a6:ad:6d:62:94:d4:6d:32:c6:d7:
d9:b9:5b:b3:5b:30:05:a2:09:a1:65:d6:2d:93:ca:fc:e9:a5:
d8:a5:42:19:05:8d:a4:72:7e:c6:e7:66:bf:0c:9b:8b:3b:ac:
6b:3f:6c:35:16:a8:ce:e7:c4:8a:35:a5:72:1a:1f:9f:f4:a4:
7f:7c:da:22:2a:ec:fb:d6:00:e9:00:40:4e:a3:ff:9f:08:31:
44:9c:1f:b4:16:2a:20:fa:86:1f:ad:22:a5:b1:ea:4c:e6:1f:
18:04:bd:c2:66:13:bc:09:56:ef:1f:27:86:66:b0:a9:87:3b:
8d:43:64:33:da:ec:a5:1b:8b:04:3e:c8:a2:ea:46:c3:c8:81:
b2:ca:80:14:ed:e7:0e:e7:46:5b:3a:c3:84:5d:e7:55:be:67:
85:73:7d:ee:e4:29:98:51:3b:57:74:d3:b0:c4:77:1b:2c:ac:
b1:e3:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:21:28 2024 by rpki-client on console-fra.rpki-client.org