Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.cer (raw, json)
Hash identifier: kks04mo4PvzDW1cNO4spbFtbiYy/JonD7Tjos5CtQBo=
Subject key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B8209DF1066758A5622A42D10E34E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199947
IP: 45.140.84.0/22
IP: 185.41.32.0/22
IP: 2a01:5420::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:82:09:df:10:66:75:8a:56:22:a4:2d:10:e3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:0a:11:52:b6:32:d0:79:a2:69:fe:8f:03:
c6:a3:65:02:68:26:f1:40:56:1e:c1:f7:8e:40:f0:
ac:32:04:f7:40:a4:8b:da:8c:a1:10:29:e0:0c:e7:
22:2b:80:b4:d3:b0:c3:a3:b3:a7:85:3d:58:38:5a:
05:88:a0:a7:7c:eb:9a:d4:b6:79:3e:e8:6d:4d:c8:
e7:cb:8e:69:e5:20:2a:bb:43:c8:27:61:de:15:d0:
2c:72:6b:43:02:e9:fb:b7:b1:61:3e:86:b2:98:18:
33:ba:e2:61:c8:b7:f9:37:4d:df:1c:65:d7:4f:27:
4f:9c:e4:44:ab:fa:f2:15:6b:59:99:9f:6f:ac:53:
95:39:82:cd:6d:03:58:2f:5b:89:6c:bb:0a:86:0e:
e6:71:53:93:a2:66:b9:20:43:79:d6:b9:f0:fc:f0:
7b:32:b4:14:de:16:3d:48:66:6b:19:40:40:23:9d:
e5:dd:f0:37:0f:56:1b:15:f8:9e:ca:83:a3:1f:36:
89:92:1e:ca:5b:2a:a5:dd:8c:dc:f6:cf:c0:11:47:
fb:7c:17:73:1c:2e:8e:62:b2:3e:06:58:3d:af:7d:
00:c1:3e:21:a5:76:75:11:aa:0c:22:de:91:52:43:
e8:48:af:73:03:79:3d:ef:61:39:38:c6:28:16:9c:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.84.0/22
185.41.32.0/22
IPv6:
2a01:5420::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199947
Signature Algorithm: sha256WithRSAEncryption
ac:d0:6f:a2:d5:b5:86:19:50:0e:c7:3e:7e:7b:9a:69:36:21:
b0:93:a8:ee:e1:df:05:51:99:ce:ac:e0:c6:d7:c7:24:10:97:
32:e9:fb:9b:06:8c:82:cd:57:a6:ff:37:2d:e1:14:e3:c6:53:
7d:ad:63:85:1f:c2:34:23:7c:07:a6:6e:93:02:28:31:28:bf:
39:49:63:e4:e5:ab:1b:ee:75:0c:b8:e7:db:60:43:72:9a:4c:
b6:d9:ef:93:3f:ea:1d:79:04:a8:4d:80:99:fc:4b:a8:9a:ee:
41:84:44:59:b6:4c:14:65:e9:c9:21:71:12:aa:8c:55:8e:0f:
45:30:97:ec:39:72:e6:ba:5c:e6:41:3d:b4:9e:61:18:ca:30:
41:7c:0f:39:6b:15:6d:99:e7:77:9a:62:c1:89:e2:f3:fd:49:
4a:32:e8:e3:51:b8:ba:2b:bf:79:5d:df:ab:ef:b5:94:e8:b3:
9a:c4:71:33:b0:ce:dc:1e:8e:d5:de:f3:99:38:ab:b4:7b:43:
5c:42:8b:fb:be:da:65:31:29:d9:54:f3:6b:b2:9c:a7:e3:63:
aa:94:93:5a:f4:78:ae:77:6c:7f:f9:31:60:35:c8:46:03:94:
db:ab:4c:8a:18:3c:c8:d9:66:02:67:88:d1:32:e3:fa:7d:f0:
93:d8:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:52:37 2024 by rpki-client on console-fra.rpki-client.org