Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer (raw, json)
Hash identifier: rfotS+bwwr45az8qV9VapggFWI3l6Z8n9f+35116tCk=
Subject key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE1F1711692BB5DE5116E470BC27D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202966
IP: 45.137.228.0/22
IP: 2a0e:ac40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e1:f1:71:16:92:bb:5d:e5:11:6e:47:0b:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:39:63:1b:f8:aa:44:12:89:f6:dc:86:4d:
ff:4f:d5:96:15:f1:35:c9:e8:7e:35:75:d8:71:6f:
4d:ba:2a:7f:7e:52:3d:2f:93:3b:24:d3:fb:bd:b0:
31:b4:28:28:5c:b3:64:e9:ea:c4:d4:bc:72:fb:60:
d9:8c:e3:80:fb:53:98:3e:87:96:cb:58:36:ee:5d:
fb:81:06:95:c0:1c:9d:c9:13:fc:ff:ef:52:95:66:
83:9c:b3:b6:dd:8a:1a:7a:f2:ab:c2:cf:76:cc:cf:
1c:81:bb:07:57:a2:5b:e3:75:67:0b:b3:04:f5:5d:
c9:92:fd:e7:8a:dd:a6:69:3d:f8:5a:e0:dc:c9:51:
14:8c:db:83:87:05:f8:d3:c9:58:07:ca:2c:ef:d4:
55:1a:80:d2:5f:40:01:c5:8c:8f:84:31:b9:6f:5a:
2e:85:2e:76:9e:9a:85:0a:9d:70:60:ac:6f:07:c8:
1b:78:8f:19:a0:a8:86:d4:10:c9:78:07:02:4b:d0:
4d:78:34:0b:dc:34:15:55:d6:20:93:58:cd:96:f8:
c4:f4:ca:a2:73:0d:ae:a2:29:26:d9:20:ae:3c:f2:
cd:b7:ba:a8:0e:24:4f:86:bf:87:43:d1:74:18:3e:
5c:eb:7a:f4:61:c2:7d:9b:d8:f3:b4:87:13:a2:ca:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.228.0/22
IPv6:
2a0e:ac40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202966
Signature Algorithm: sha256WithRSAEncryption
77:22:c2:48:3c:34:6f:93:bb:c5:e3:6c:e8:bb:40:b3:6a:cd:
62:83:45:4d:c4:04:44:6f:8e:89:13:0f:00:28:c5:57:2b:9b:
ce:9f:cb:97:05:ad:5f:44:e2:e2:10:fe:70:c4:b1:2a:69:21:
d1:a8:d3:d5:a5:f1:f6:e3:b6:ca:b9:5e:85:b0:87:73:a9:a7:
27:ed:06:05:0f:6e:04:82:e3:ba:12:24:8f:91:25:24:b4:43:
76:05:f8:de:4c:51:6d:a6:b8:b6:f8:2c:c6:a0:a0:08:c2:e6:
61:b4:05:4f:10:72:9b:66:1a:76:c5:7c:17:69:ab:37:b0:9b:
c8:9f:b3:1b:84:b8:9e:70:53:81:57:a7:ec:4e:ee:e7:47:18:
57:c7:cb:83:a2:07:65:17:de:0d:82:16:16:f8:4f:99:28:bf:
61:1d:7f:e7:95:6b:7e:a9:df:b5:55:28:65:0c:67:42:da:6e:
a8:e0:1d:65:cb:14:e6:44:d0:79:59:a9:70:fb:52:53:99:43:
98:ce:7b:3e:ae:c6:9c:20:eb:17:d4:f5:54:0e:c8:2c:32:b4:
86:92:2b:86:37:f8:51:d9:ee:9d:2d:80:1a:14:c9:ed:58:a3:
88:e1:f7:78:3e:57:70:61:24:7e:02:45:0d:da:60:49:83:11:
6f:e2:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:13:57 2024 by rpki-client on console-ams.rpki-client.org