Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
File: IS6vWaK_88qxGHEYlEeLue_5O4U.cer (raw, json)
Hash identifier: 0HfflQO1C4HLLiRiuJ246bYhRq6vv97aMva1J3TiVEE=
Subject key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBFF19D59E52026C9BD049FD9BB52E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24958
IP: 37.200.112.0/21
IP: 93.91.16.0/20
IP: 109.73.112.0/20
IP: 176.65.64.0/21
IP: 185.10.12.0/22
IP: 213.129.64.0/19
IP: 2a00:1430::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ff:19:d5:9e:52:02:6c:9b:d0:49:fd:9b:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:6d:4d:f4:a0:23:26:07:61:5f:60:06:90:
0f:10:59:79:91:c5:17:29:19:8b:8d:ee:4e:90:5c:
31:1a:2b:cd:62:0c:2e:1c:12:c2:71:bf:fb:a9:0d:
e5:31:01:3e:2f:3e:4b:81:f5:d4:0c:f9:5f:d5:2e:
72:5b:1b:13:7a:af:12:64:ab:e1:4f:f2:ae:ea:53:
20:00:21:d6:d9:25:1b:25:6b:21:39:69:cd:d2:7b:
84:ac:b6:5a:a5:83:fe:2f:fa:f1:97:3b:f2:c0:5b:
bc:76:b4:4b:22:0e:b1:97:c1:f0:5b:0b:53:69:76:
ff:30:6a:a5:91:64:dc:25:26:fb:02:b9:8f:43:82:
6e:1f:ee:52:f2:ae:89:e8:cf:32:30:de:48:de:fb:
62:50:96:05:1d:eb:1a:f1:80:d0:46:74:1b:b9:fa:
e7:4d:9a:6d:bb:46:14:f8:c6:6c:21:22:9f:c2:6d:
a4:86:da:b0:41:23:03:16:40:59:80:e0:d8:2e:53:
46:11:4c:2b:a8:0c:eb:8f:8a:6b:02:48:52:c2:4f:
1e:2f:13:4d:03:13:1e:84:e5:41:39:aa:f6:ec:6b:
b7:40:cb:e3:ed:52:26:91:b8:0c:56:00:b8:46:10:
92:ed:12:e1:51:75:03:bc:5c:26:08:b6:7c:3f:b2:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.112.0/21
93.91.16.0/20
109.73.112.0/20
176.65.64.0/21
185.10.12.0/22
213.129.64.0/19
IPv6:
2a00:1430::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24958
Signature Algorithm: sha256WithRSAEncryption
1b:8f:3a:ab:41:e6:df:f9:66:ba:97:a5:19:16:c9:a4:58:09:
50:04:ae:97:3c:b3:cd:ea:cb:d7:97:2c:0c:16:76:e0:80:23:
72:16:ee:73:4c:7b:98:e7:ba:cd:f5:13:38:46:16:38:b4:bb:
29:98:5b:df:67:27:73:25:08:0d:cb:62:b9:32:14:19:69:3f:
1e:ce:d4:84:66:8b:8b:c9:53:c2:7e:85:b9:41:42:3e:08:5b:
b1:73:70:47:10:7a:2b:02:d9:09:23:86:9f:c3:9d:25:d8:51:
32:58:d5:d6:98:19:fa:bb:3a:46:b2:7f:c5:cf:71:f7:7e:24:
2c:aa:57:1b:dd:55:18:84:22:7f:4c:ec:7a:c5:06:a3:67:16:
17:2d:b2:01:cd:05:83:47:3d:29:20:72:cb:1d:ad:7f:cf:12:
fa:42:ab:a4:36:35:11:97:a4:b9:bc:82:32:6f:6d:a8:9f:6f:
26:93:62:33:4d:51:8d:30:64:87:49:28:66:89:e2:c9:47:21:
1c:f8:6a:fe:87:c1:d6:c3:7f:27:7d:89:34:23:a8:49:09:43:
5d:b8:d8:7f:35:b0:1c:08:be:8b:46:83:33:bb:63:32:43:36:
70:db:fb:9a:72:89:f2:c5:ea:10:3a:3f:3f:7c:23:eb:a8:fc:
f0:a9:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:23:11 2024 by rpki-client on console-fra.rpki-client.org