Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.cer (raw, json)
Hash identifier: hUBvs3pHXlUsEcKU9u+vggFM0wSInR2CH7knuJW22po=
Subject key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190E9BC6200D5291C087F7E0FEFAE3236E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jul 2024 11:52:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203547
IP: 185.131.44.0/22
IP: 2a05:e7c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:bc:62:00:d5:29:1c:08:7f:7e:0f:ef:ae:32:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 25 11:52:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:c1:c1:82:00:51:31:51:20:97:44:07:62:
2e:7c:a8:9c:30:e6:f3:cd:51:e7:70:df:f6:bd:64:
65:b3:da:e1:ea:2a:d2:6f:25:b3:17:5e:65:05:6f:
59:4c:fd:dd:66:36:3a:12:c6:d5:5c:2d:68:ec:58:
1b:09:25:d9:80:ca:7d:8e:ae:3d:db:c6:f3:e6:11:
d7:2b:21:fc:83:47:a6:be:a8:f0:5a:41:35:98:39:
a3:f8:dd:95:0b:6f:61:db:52:cf:3f:96:57:04:5b:
c5:9d:08:4a:3e:f5:31:ee:57:86:3c:2e:fb:47:d9:
27:c8:fc:94:da:b3:21:1c:67:da:7c:51:70:05:d1:
e7:f1:55:1b:7a:22:57:09:21:0d:ee:91:93:fd:28:
b6:e8:e5:f1:aa:59:c2:dc:a6:1c:01:80:52:b3:ac:
7b:c7:0c:0c:52:c1:ad:c0:94:ea:cf:8a:82:73:8d:
c0:85:4f:2d:05:1b:a2:fb:8e:d5:96:2c:6b:8a:9b:
24:c4:88:25:92:38:0c:b0:7f:91:85:79:ea:f8:be:
3e:ac:12:ab:f7:a3:6b:5b:e5:8d:ef:0d:2c:27:b1:
37:93:8c:1f:04:98:db:81:d4:16:30:5d:57:00:63:
e1:ab:cc:5e:66:db:2c:08:b1:a9:80:fb:17:a5:2b:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.44.0/22
IPv6:
2a05:e7c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203547
Signature Algorithm: sha256WithRSAEncryption
2a:dd:a7:9a:68:ba:9a:ea:d4:ec:55:f3:3a:fa:c4:f6:60:7e:
11:2d:d4:e7:cc:57:b5:3d:9e:7d:e3:17:17:b5:61:af:f9:8f:
4a:7d:b7:8b:35:09:49:48:43:34:bb:d9:6a:5a:7b:78:5b:f7:
1e:32:32:f6:71:27:e6:f7:28:6d:fa:ad:ce:1d:85:47:ce:2b:
75:21:c3:56:79:2d:67:79:60:71:da:de:12:7a:39:03:5b:b7:
c7:49:90:a7:35:7f:89:a7:81:ac:29:4c:73:22:a7:55:84:3f:
57:43:75:7c:50:fe:87:eb:d4:c4:58:88:de:cf:61:aa:d2:a9:
29:09:5d:aa:e9:60:8a:02:68:65:61:ca:cf:49:f0:de:b6:52:
9d:68:b4:ed:cf:1f:71:d6:04:74:7f:79:0c:59:cc:f0:99:f7:
06:e2:f9:4d:18:9b:9f:a6:26:23:84:e3:ce:a5:a9:61:0a:62:
11:28:67:13:5e:7b:5b:ea:8d:f1:75:14:9d:cc:bd:31:35:7c:
cf:da:dc:e1:a0:76:24:9c:27:52:cc:cf:66:b3:85:88:43:e6:
96:c5:5e:10:2b:70:b4:fc:a3:44:f6:16:0b:40:64:15:b9:ad:
0d:2d:5d:4f:0c:75:f1:63:e2:5e:de:dc:a8:c7:f9:37:60:bf:
0f:80:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:10:46 2024 by rpki-client on console-ams.rpki-client.org