Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer (raw, json)
Hash identifier: bdx1npU9zkh7aLxNh6bqqcpr9s2MfEbofUGI58cA5/0=
Subject key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B841F40F86C0A3F872C59E3D0ABE29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42513
IP: 188.116.46.0/24
IP: 192.111.100.0/24
IP: 194.62.4.0/23
IP: 194.62.8.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:41:f4:0f:86:c0:a3:f8:72:c5:9e:3d:0a:be:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:44:ab:07:18:13:88:1e:f8:94:f7:9d:93:
5f:c6:62:73:2d:1a:09:00:c2:46:5b:14:be:0f:1a:
77:d8:f6:93:94:30:80:67:d2:94:90:f3:76:6c:54:
3a:47:de:c8:75:30:76:de:62:32:27:f3:39:5f:76:
7c:b4:7a:23:32:d0:90:86:0a:9c:99:c9:f0:0c:ed:
44:2e:5c:36:1f:00:5a:11:b4:bd:8d:e9:30:0f:cd:
8b:b3:e6:87:8d:f7:0c:47:b7:8a:57:55:55:c9:3b:
67:67:cc:a8:c7:2e:ec:81:d7:06:8e:86:32:9f:bf:
25:4d:58:4b:d3:fa:f0:37:a0:9e:bd:40:fc:36:9c:
5e:8b:a1:dd:cb:1f:f6:fc:fb:ce:08:f1:47:8d:c4:
0f:3e:d0:75:b5:56:da:38:f2:46:7c:b6:02:82:9b:
69:86:b2:5f:45:4d:a6:a3:73:b8:ab:e4:f2:d5:1f:
87:9e:d0:27:54:32:83:9e:e6:41:0b:87:8f:f6:ff:
13:1f:54:98:77:76:6d:2f:49:15:a3:32:aa:22:0f:
5b:01:21:a0:fe:e0:63:b1:d4:11:70:2e:47:02:e6:
d5:ce:c5:26:1a:09:4e:05:25:12:ec:f4:46:f7:13:
0c:9e:0e:2d:46:33:3f:d1:c4:b6:82:37:ba:75:a4:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.116.46.0/24
192.111.100.0/24
194.62.4.0/23
194.62.8.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42513
Signature Algorithm: sha256WithRSAEncryption
27:e4:96:57:2a:ac:bc:c3:20:0e:65:1f:21:fa:f0:34:23:33:
d2:8d:5e:cd:3b:cc:be:c1:e2:8e:8f:73:f0:1b:e0:8a:e9:fe:
26:df:c9:9e:bb:83:7a:44:f2:07:f0:c4:66:79:cc:d7:2a:42:
36:37:e4:65:6d:5d:2a:18:9e:8c:f9:ce:89:03:0b:03:c0:b3:
53:00:ea:6c:89:07:2d:6d:4c:3a:ac:63:c1:d9:77:12:c4:73:
98:40:6a:ae:f6:41:5a:88:d1:a6:ff:8c:39:dd:02:e9:31:26:
4c:6c:53:28:ad:1f:85:b5:ac:24:fa:5a:63:37:de:d3:25:bc:
3d:61:20:b8:e2:0e:e0:70:4f:e6:5c:d2:fd:6c:f1:1d:2e:7d:
eb:a1:6a:86:d0:bc:15:e2:61:77:de:48:ea:3a:5a:ae:19:de:
74:32:d0:08:37:44:c2:22:80:d2:92:a6:c7:9d:8a:e0:ec:80:
6a:07:cb:e5:93:a9:31:e6:15:11:c5:d8:a1:2d:1c:d0:97:ce:
83:b9:4f:5d:c8:60:9d:5d:41:1b:a0:05:e0:3f:8d:a6:11:b6:
45:82:cb:c3:24:79:8c:b7:5d:ff:ac:c4:e0:21:11:70:1b:09:
c0:54:89:e9:75:82:e4:65:ad:4a:f3:5c:74:90:3f:31:b3:da:
35:31:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:02:54 2024 by rpki-client on console-ams.rpki-client.org