Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
File: KVkHdOd6iZSkKDEow1kh0DewbyE.cer (raw, json)
Hash identifier: zxGv7VNJmqsGyuMG8glc1Zum/8sZWB8v0TUsf3Kqfww=
Subject key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAF96505AC2A658BC4AE2ED1B48B31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210198
IP: 185.137.128.0/22
IP: 2a0c:a980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f9:65:05:ac:2a:65:8b:c4:ae:2e:d1:b4:8b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29590774e77a8994a4283128c35921d037b06f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:13:31:ac:16:8d:79:ec:20:7f:fc:7f:2b:
24:b5:dc:54:22:11:a9:ed:15:5f:3d:83:b4:35:bd:
dc:d9:13:77:64:37:d6:4f:8d:5a:c4:e5:14:db:48:
6f:66:c4:1c:c9:be:22:5e:9d:53:bf:e1:44:af:91:
87:9b:35:c8:75:68:26:16:c7:13:05:09:12:1e:03:
09:f4:17:58:71:60:30:82:d9:3f:0d:0b:89:ca:1a:
17:8e:61:4b:8b:65:d6:09:3c:c0:ad:aa:b1:99:dd:
cf:fc:4b:00:6c:42:47:74:77:9a:84:e0:53:54:f8:
61:69:65:17:d2:89:78:6c:5a:38:3a:6d:b9:8e:19:
4e:20:d2:c0:04:6e:40:ef:3a:ca:3d:0d:16:50:df:
56:1c:21:ce:a8:d9:80:c8:86:b9:f1:cc:1d:ed:c3:
6e:47:75:44:bf:53:4c:1a:9a:69:b0:91:74:75:9b:
44:40:95:f7:5c:87:d5:66:ab:a2:eb:90:ed:ba:4e:
dc:9b:0e:53:cc:3e:f4:b9:fb:c9:b7:2b:72:68:22:
fb:cd:50:cb:1a:ea:72:c0:8e:82:b2:26:59:e0:24:
2a:46:b0:d1:ac:c6:55:54:19:b6:7c:f9:36:52:d0:
da:df:90:9d:b3:77:1d:c6:d3:03:13:d2:d6:a8:b4:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.128.0/22
IPv6:
2a0c:a980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210198
Signature Algorithm: sha256WithRSAEncryption
00:c8:88:f1:ca:b4:47:09:9c:e1:8e:b7:ba:7b:ed:38:bd:6c:
8e:61:ea:af:d0:7e:5a:64:3d:f5:30:9a:af:40:f9:23:50:00:
a7:44:f3:f4:0c:01:4f:fc:3a:ab:44:80:eb:59:78:c3:fc:32:
48:af:49:56:e4:3d:d3:2c:15:f3:b2:8a:69:5b:61:9c:8a:6e:
0f:ed:2e:1b:49:d2:01:94:0a:68:8a:e6:c7:65:d3:d7:b8:15:
f2:14:ce:2a:09:cb:43:07:e4:b8:b4:fe:b2:58:53:9a:07:dc:
60:1f:7d:7f:e4:b8:a7:5b:81:80:6e:d7:65:22:a7:a2:32:a7:
d7:fc:95:76:8b:21:b6:f3:98:28:63:70:d8:7f:3b:77:d1:36:
76:3d:be:da:d6:9c:15:25:31:6c:26:af:d6:49:2e:d0:2b:22:
d4:b1:b8:f1:77:38:34:66:63:07:91:72:01:cf:f6:5e:50:bb:
00:38:0d:b2:2d:3d:71:5d:dc:c4:d1:ae:c2:6e:79:a0:bc:c7:
38:a0:0b:87:96:e4:3a:f5:94:6a:37:50:e6:4f:ec:c7:32:ca:
22:ad:87:b5:aa:b9:1a:4c:0f:d6:30:e1:87:d6:a2:07:cb:66:
d2:3c:4e:ca:bb:8a:6e:2e:df:2f:74:c4:4d:e5:86:22:b4:67:
0a:e5:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:10:50 2024 by rpki-client on console-fra.rpki-client.org