Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
File: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer (raw, json)
Hash identifier: 9UzSoFYd9Cu7+SppAzex/CQcWz47NtfrN3enWWLTOkg=
Subject key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424AD8BA05A20B27EF7A0AC8138E977
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208910
IP: 83.171.220.0/22
IP: 2a09:3100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ad:8b:a0:5a:20:b2:7e:f7:a0:ac:81:38:e9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=285feec87d1959340872f8f79831202f24c80c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:92:c6:c8:3a:10:06:04:58:96:73:d6:3b:
eb:e0:e7:2f:87:28:52:d4:09:11:6f:72:bc:a4:56:
d3:59:51:65:39:9a:f5:e7:0c:31:de:0e:8a:a9:bf:
28:96:6a:af:ea:a4:90:a6:3b:4e:09:75:da:03:63:
a9:5f:a9:63:e1:bf:41:24:ed:37:af:56:4d:02:20:
ae:16:a2:97:fc:61:39:03:aa:36:1d:44:2d:24:92:
0a:29:8d:e8:ad:2b:8c:f0:51:0d:4e:4f:c6:e1:87:
55:c7:e2:71:6e:29:dc:a8:8d:55:3e:ef:78:8c:6e:
d9:69:9a:9b:ae:eb:9d:67:a9:ac:c3:bd:58:e8:0e:
77:4c:59:d1:cd:5d:68:5e:aa:e1:b7:a0:c1:7b:f7:
85:e6:a6:9f:ee:56:4f:2f:88:ae:4b:ab:71:6c:13:
fb:93:d3:cf:07:78:9d:3f:64:fe:3b:d3:dc:54:b3:
bf:71:43:5d:76:7d:90:be:85:e5:45:a7:34:9a:65:
75:8e:70:d7:c0:6c:db:06:de:eb:a8:54:91:70:11:
bf:3d:91:42:12:70:52:60:ed:fd:af:33:2d:0d:bd:
7a:db:a9:80:22:08:7a:f1:8b:c4:cf:6c:8d:a4:ba:
2b:78:69:4e:95:c0:f4:c0:a1:da:3a:66:f3:44:43:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.220.0/22
IPv6:
2a09:3100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208910
Signature Algorithm: sha256WithRSAEncryption
80:dd:71:a5:66:03:05:8e:2d:9a:13:f7:58:f9:7a:f7:98:93:
f2:78:0c:0a:0b:59:2f:a7:eb:ff:43:30:49:c6:7a:77:a4:a2:
c2:99:35:db:4c:64:2e:b8:a0:79:5e:36:1c:69:89:93:48:86:
b6:76:fc:93:78:7f:f6:47:04:3b:ad:22:ed:35:58:a4:b0:ab:
92:7f:d5:b6:5c:29:0e:b5:2f:c6:b5:a1:76:1b:a4:89:b5:59:
1d:e1:b1:29:67:e4:8c:a4:f9:a9:79:2c:43:df:ff:2e:07:81:
82:bd:fc:ef:5c:9f:47:7e:7a:00:ad:d0:66:01:24:8b:eb:b2:
3c:ec:35:30:1c:3d:51:ea:cb:49:d3:8b:4d:cb:b9:22:26:01:
5c:80:69:99:61:8d:06:ba:87:ee:32:c1:60:b2:02:ab:8e:ad:
9d:5b:e1:0f:8b:40:10:45:6a:f1:db:91:d6:d1:7c:25:0f:95:
ee:f1:f3:3f:d8:9a:99:ee:dc:8f:95:1c:dc:0a:5b:99:9e:49:
a0:6c:bf:98:44:f0:db:f8:9f:f6:ff:06:ef:a2:e1:f5:99:96:
ae:b7:36:f1:d9:e7:ce:6c:a8:33:4b:18:d4:9f:be:6c:27:1f:
6c:64:96:29:5d:03:f0:00:a1:4c:50:3c:9e:66:b9:4c:e7:99:
e0:13:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:32 2024 by rpki-client on console-fra.rpki-client.org