Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.cer (raw, json)
Hash identifier: N1IRK2GPydcQC5zRcSuVfmHw/pVJvveiKuXNeMI4WxQ=
Subject key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC870F9F6CEC71FDEED71F4504AFAF393
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211212
IP: 185.196.52.0/22
IP: 185.203.184.0/22
IP: 185.232.99.0/24
IP: 2a0a:66c0::/32
IP: 2a0a:ec40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:f9:f6:ce:c7:1f:de:ed:71:f4:50:4a:fa:f3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=282c93d266852788e49982d9f7a620db6d9f588d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:59:29:66:93:b4:75:96:20:ef:ea:16:07:
89:9c:6b:8a:4e:67:94:b1:75:39:36:d4:33:e7:87:
b9:03:4d:93:15:c0:08:05:45:b9:ec:79:a0:ac:b5:
c7:aa:b1:85:f7:23:17:33:3a:57:55:67:20:4e:a2:
c5:5c:2e:8b:e0:bb:f0:d3:2a:cf:13:da:72:4d:48:
f7:41:7f:26:78:d9:f9:d5:97:f2:a4:53:bb:05:6a:
d6:5e:1c:26:42:f1:96:b8:88:c7:82:5b:eb:9f:63:
a9:7d:32:7f:31:7a:ff:45:f6:f7:8a:d9:ac:4d:36:
95:03:ba:f5:6b:00:c8:43:14:74:c4:a1:a1:6e:e8:
5d:4c:ac:45:e4:ed:80:5c:b6:6d:de:a7:82:e7:86:
72:d9:fd:08:ce:ad:ca:90:f7:34:81:82:57:5c:e9:
23:55:3d:55:24:d1:8c:e6:38:d9:df:5b:4c:ef:1d:
0c:f2:1d:54:c0:96:03:33:4a:ca:88:29:b7:54:41:
9f:ac:8e:71:78:93:68:2b:64:d5:d7:8d:65:92:cd:
2e:35:84:03:ba:88:e8:aa:1f:7a:03:46:4b:7b:81:
54:2f:6e:d8:1b:2a:84:08:c4:81:52:da:c8:9b:1c:
df:87:38:d8:b5:91:8c:16:29:17:d0:18:dd:01:c7:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.52.0/22
185.203.184.0/22
185.232.99.0/24
IPv6:
2a0a:66c0::/32
2a0a:ec40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211212
Signature Algorithm: sha256WithRSAEncryption
79:11:4b:8a:24:de:e7:e4:84:df:42:7a:fc:93:cc:8e:63:a1:
12:c7:97:8d:ed:ab:9a:bf:fa:22:29:f3:aa:ba:e5:1b:c3:73:
fb:d3:d9:34:32:ba:0d:3c:ee:d9:de:ea:7e:0e:2c:6e:a9:df:
cb:a9:88:90:29:27:d1:a5:2e:6d:6e:3e:fa:0d:1d:3d:21:12:
99:3a:18:73:fd:49:b1:95:3c:73:be:80:9d:c8:f8:ab:2f:a2:
de:a5:9e:08:c0:c2:e4:82:c9:e0:f1:68:72:22:1b:f5:13:40:
ba:47:6f:25:a2:a2:c8:52:31:0c:d4:cc:f7:28:0a:4f:43:7d:
59:fd:ea:77:95:89:af:5f:6d:63:84:d3:d3:68:66:87:f4:2d:
bd:44:9b:59:b7:b8:81:55:98:fb:d7:1e:ef:64:8e:4a:45:6e:
63:2a:0d:82:ee:8c:ad:b4:bc:4f:53:fb:ee:3b:ac:63:0c:61:
9c:90:a3:12:18:32:f0:dd:80:37:e9:67:fe:04:39:41:7c:1d:
bf:3d:bd:20:ac:83:a3:75:a2:3c:fd:f9:2c:2a:6c:0a:05:f7:
45:7f:2f:40:0a:21:61:65:aa:42:e2:97:b4:94:55:e6:fb:d4:
ec:05:00:75:ac:37:65:ec:fb:a4:c3:72:f1:e6:1e:86:a5:9e:
b4:81:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:28:20 2024 by rpki-client on console-ams.rpki-client.org