Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.cer (raw, json)
Hash identifier: ndeZ5WcELFaM4gu72sHJIUEzQCwBO3BkByVae6W91eg=
Subject key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E74C68BA2B18E89037B45EC9E65144BDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 25 Mar 2024 08:42:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205904
IP: 185.201.56.0/22
IP: 2a0b:3e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:c6:8b:a2:b1:8e:89:03:7b:45:ec:9e:65:14:4b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 08:42:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:f1:e6:c2:ee:7b:ed:ae:1e:76:f4:1d:33:
26:9b:29:fb:a6:fe:b9:44:38:f2:1d:32:f0:d1:54:
42:90:f1:95:78:64:13:19:6f:21:26:dd:34:3b:64:
f7:02:1b:77:0f:79:f4:b2:76:21:83:f3:8a:18:85:
62:a6:34:14:df:33:47:75:20:da:46:a2:e6:f4:21:
5c:6e:95:1b:52:5a:a3:f1:b1:4d:0a:08:55:44:00:
0a:6c:39:7c:e5:7b:a8:f9:00:53:bc:c9:14:41:d1:
e5:9b:d2:48:de:30:26:71:23:6d:95:a3:f6:34:6c:
99:3a:b0:85:67:0b:99:24:1c:10:38:a4:48:28:59:
75:68:61:b2:49:5f:be:39:f7:fc:0d:16:2c:d8:5e:
e0:a9:b7:ce:25:42:ce:bb:71:96:67:00:7a:fc:2c:
ef:51:fd:5b:1a:51:6e:54:6a:dc:c1:c8:16:04:98:
81:71:70:dd:95:72:73:19:54:f4:93:c3:38:e9:5c:
e8:5c:fa:d9:d7:f9:3d:7a:a6:78:5e:ea:66:9f:81:
12:e9:1b:83:50:29:d0:1c:ea:33:79:99:9f:62:67:
62:69:be:52:f0:07:fd:60:ae:8c:d3:db:95:69:1e:
aa:91:88:45:20:12:f1:07:02:b8:10:83:8b:58:87:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.56.0/22
IPv6:
2a0b:3e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205904
Signature Algorithm: sha256WithRSAEncryption
7f:9b:1f:1c:53:0a:07:73:e7:8d:75:34:d0:91:22:d7:68:cd:
44:ea:7d:e3:89:5c:31:8f:c4:0e:fc:06:c4:2e:cf:6f:9b:e3:
2a:58:92:cf:ff:b1:72:93:ee:55:07:f3:1c:cd:a3:99:45:d3:
85:b3:1e:41:50:03:9d:aa:14:9d:11:be:22:e8:38:a7:67:c6:
fa:ff:80:be:f4:22:43:21:80:b4:56:f0:a9:94:8b:08:67:dd:
14:70:9e:69:37:7e:44:8c:41:61:cb:88:c1:4c:f4:79:12:43:
ff:3b:be:1f:7e:41:57:52:57:23:a2:03:b4:31:08:fb:a7:b3:
53:e9:5f:2b:99:b2:f4:fc:dc:09:0a:68:77:4f:67:39:83:26:
c2:e8:ae:e4:9a:26:a6:fd:dd:82:ab:b2:ea:78:25:96:da:5d:
f5:34:f5:cd:7a:45:67:1a:0d:c6:8e:07:99:f5:b7:57:23:08:
f8:35:95:dc:08:63:bc:45:60:93:b6:6e:f0:89:3e:28:48:fa:
91:d9:8c:c7:d5:1f:46:2e:f3:d4:1e:8c:5e:28:4d:cf:4b:28:
7e:86:c4:a1:12:89:37:f8:32:d9:04:35:1f:09:0a:00:b9:a9:
17:de:5b:0d:a4:ce:0e:43:e8:6e:b6:a2:2e:36:c2:c6:e5:c6:
52:48:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:26:41 2024 by rpki-client on console-fra.rpki-client.org