Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
File: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer (raw, json)
Hash identifier: duJp+h/EDkiftEo1KjSFzxPJYW58HQFSzhD3eB9g+DU=
Subject key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBB6D80EBB9492A2E6EBD35C5E1CF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204114
AS: 210605
AS: 213336
IP: 45.148.176.0/22
IP: 185.25.112.0/22
IP: 2a00:7e60::/32
IP: 2a11:61c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b6:d8:0e:bb:94:92:a2:e6:eb:d3:5c:5e:1c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:a1:1c:f1:0e:6b:b6:7a:86:30:3f:4e:ae:
ee:d2:d1:bf:32:61:a4:17:55:e9:86:97:f6:69:d3:
d5:9e:03:32:40:59:22:97:93:87:02:3c:de:3d:36:
a7:a3:5f:7e:1d:9d:2c:51:bb:b5:51:8a:4c:34:5e:
f9:f6:f5:62:1e:0f:3f:33:f4:50:86:0c:ec:8b:20:
ff:cf:65:54:f9:4b:77:c8:53:6e:0e:75:5f:13:18:
91:02:b2:c6:f3:aa:a8:c7:05:62:63:73:11:4e:fd:
ce:db:ad:78:db:4e:35:9a:88:38:04:ab:c0:23:78:
b8:8c:ec:84:b8:e7:41:6d:6e:bf:fc:df:1b:90:8c:
1e:39:25:ed:9b:eb:e1:ed:67:ca:d8:4a:d5:73:0d:
5f:75:c3:49:b3:d5:4d:70:6d:c7:84:38:e0:93:2b:
26:07:98:cf:59:ea:ee:c2:71:3d:d9:c1:9e:7c:37:
ee:39:f6:4c:ad:5c:26:ef:5f:1a:ce:6a:7a:05:b6:
50:b9:9b:70:1f:88:4b:fa:a6:a8:9c:cb:6d:bc:fb:
b4:d2:74:cb:32:35:1c:4a:0b:a6:60:09:70:18:11:
b1:bd:8c:db:3b:ea:54:ec:ed:56:de:66:58:9e:f8:
92:41:37:22:45:15:c6:ab:20:14:2c:f1:0e:c2:1f:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.176.0/22
185.25.112.0/22
IPv6:
2a00:7e60::/32
2a11:61c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204114
210605
213336
Signature Algorithm: sha256WithRSAEncryption
42:d1:b6:27:d7:8a:10:d1:5f:3f:69:02:40:79:ab:3a:70:35:
30:3f:09:9d:19:e6:19:1d:14:fc:f4:e3:7d:eb:3e:83:c4:16:
6b:ff:f7:e7:00:79:85:71:7d:36:b5:e5:dd:ac:e6:b8:41:bb:
e9:7c:ed:78:2a:63:88:13:c2:0d:2b:11:cf:18:46:66:64:2a:
ca:a6:f4:14:bb:01:86:8c:e2:c5:87:ed:ab:0e:dc:ba:90:f2:
d0:79:9b:d2:1b:34:d3:7d:a6:bd:4a:1a:8a:da:73:bd:4a:5a:
fa:e8:de:59:68:55:24:7b:6a:45:50:37:4d:d0:f3:b1:8c:3b:
7e:c1:e3:16:b8:c7:e0:5c:b7:56:52:f9:cc:ba:38:bd:fc:f1:
07:87:fd:0f:b1:76:bb:df:54:69:1b:21:1f:84:ea:94:a9:41:
78:bd:84:50:68:dd:b7:75:e5:70:14:09:4d:fe:0b:88:0e:f3:
4a:da:3c:9e:91:63:f4:52:00:96:b8:08:2b:fd:bb:dc:6a:ac:
d0:53:41:1b:7e:3f:9f:0f:44:66:72:89:82:ac:d1:6c:c0:cd:
c6:2d:9d:b8:92:66:8e:2d:5f:0a:ab:08:14:d9:f0:db:7b:d7:
8c:bb:3a:3e:c0:24:ab:ff:ab:aa:2c:63:bc:06:c2:e2:a3:2f:
2c:c3:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 04:42:04 2024 by rpki-client on console-ams.rpki-client.org