Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.cer (raw, json)
Hash identifier: C9vb5Q+lj7HzPQ1N3bQsV4XvNM13oBFtPUZQm0EpdUQ=
Subject key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349189B789DFB305B53916005714C8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60283
AS: 204424
AS: 213075
IP: 185.243.84.0/22
IP: 193.200.250.0/24
IP: 2a0c:1440::/29
IP: 2a0d:d80::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:18:9b:78:9d:fb:30:5b:53:91:60:05:71:4c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:4e:8f:14:1b:44:b9:d3:44:5b:37:dd:4b:
ac:46:4c:c2:fb:2d:7a:1d:8a:25:d4:6e:91:b4:30:
a9:67:e4:3a:2f:34:e3:af:19:ac:7b:e5:5e:88:04:
21:6d:40:a1:80:4f:c0:12:97:6a:0c:39:8b:77:8c:
e0:09:9e:c5:2e:d4:e3:59:6e:1c:8a:fa:f1:d1:fd:
0b:a7:d3:3c:54:4a:4e:ee:ad:51:24:aa:01:9b:4d:
da:b5:30:1a:bb:48:c2:c8:7e:36:87:05:5c:ab:46:
11:de:42:86:f4:9b:6b:79:56:e9:01:dd:c9:d3:a1:
ce:cc:de:86:e3:ad:f9:e2:a0:16:fc:4d:1f:15:e1:
61:66:17:8a:f1:f5:ef:0c:35:a0:cd:5b:de:b4:ad:
f8:bc:75:26:bd:c8:88:b2:46:a0:b0:53:98:53:dc:
4d:2c:c3:39:91:f2:84:d9:c3:8a:8e:e4:6c:5b:ba:
c1:44:25:80:f9:fd:5f:e0:09:06:f6:4b:34:28:ed:
ff:15:d9:5a:48:61:8c:74:42:da:5d:55:1d:f5:32:
05:83:6a:38:5a:15:d2:87:97:1e:4a:b7:ab:92:f6:
dd:9b:a9:75:91:61:62:ab:73:30:47:9e:04:77:6a:
48:9e:69:f9:e8:bc:1f:76:78:9f:fd:29:39:01:fe:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.84.0/22
193.200.250.0/24
IPv6:
2a0c:1440::/29
2a0d:d80::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60283
204424
213075
Signature Algorithm: sha256WithRSAEncryption
32:7d:25:d0:f8:df:de:1a:be:97:5b:53:b9:83:45:06:3a:a2:
0b:2d:2e:85:f1:c0:97:a4:7c:f5:30:c1:95:cb:dc:0b:b9:e9:
2e:36:bc:41:cf:a9:0e:49:b0:8a:de:c8:61:8f:a7:60:cf:a4:
7c:f6:89:81:ba:19:9e:93:8c:43:fa:99:4f:86:c2:f4:db:e2:
0a:d7:7d:84:0c:3b:56:87:65:ea:51:4a:8c:b3:81:55:44:95:
a2:32:8a:40:0e:e6:69:8c:d1:57:74:99:7f:ba:f0:aa:ff:8a:
73:6d:4c:71:ca:dd:2c:f5:0e:e3:d4:56:78:5d:a8:be:04:28:
48:96:d6:37:16:43:3a:1b:d7:1e:5c:e4:98:69:21:dc:f2:2b:
a6:47:78:d2:43:bf:5d:73:1c:33:03:5c:f0:0f:40:c9:8d:d4:
a9:7c:83:25:1e:7b:8d:19:d2:b2:6f:0f:55:58:34:62:6a:6e:
52:6e:95:9f:5f:76:c2:f1:5a:2b:ac:d9:a6:5f:99:7e:76:a2:
27:01:47:9a:86:b3:d7:3b:8f:e3:32:41:e4:a7:22:18:13:65:
4b:62:a7:e1:45:5d:14:76:79:48:d9:ee:18:ed:17:5a:23:d4:
0e:18:8f:8d:f2:70:2e:a2:b0:6c:34:1d:fd:38:42:2e:46:42:
55:f4:d1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:52:41 2024 by rpki-client on console-fra.rpki-client.org