Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
File: KWi04O-BBvDhKrjlAdKqTja3g8I.cer (raw, json)
Hash identifier: QlPb9CIAO+Mc7mWYPGogwrPjTvQOQJEjC57QqELdnN8=
Subject key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01914B1A74225C8BC0C327662EA2D4B553C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Aug 2024 09:38:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214770
IP: 46.17.216.0/24
IP: 2001:67c:e9c::/48
IP: 2001:67c:ea0::/48
IP: 2001:67c:ea4::/48
IP: 2001:67c:ea8::/48
IP: 2a01:e900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:1a:74:22:5c:8b:c0:c3:27:66:2e:a2:d4:b5:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 09:38:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:ac:fd:4c:a0:30:5a:e2:fa:f0:e7:8e:37:
8e:bc:e6:7f:33:6c:8d:34:4f:37:03:1b:9e:84:30:
3e:69:f6:8c:c6:5b:f6:2d:3b:5c:3e:21:42:bd:58:
b5:6b:5e:6d:dc:a6:4a:fc:5a:55:b1:42:03:36:16:
8d:48:63:fd:62:f2:4a:fb:15:05:12:69:8b:f6:45:
7e:66:f2:b5:90:b2:87:1e:a9:72:aa:5b:7a:bd:cb:
2b:90:f6:37:13:67:86:7f:2f:e6:6b:71:12:bb:a0:
55:2d:0d:80:eb:43:c5:4f:8e:0a:1d:e9:f6:79:d3:
29:aa:7e:31:c2:fb:5a:dc:ea:5f:8c:06:d6:79:a8:
82:6a:35:51:07:14:43:aa:c1:2f:73:88:77:ba:43:
2d:8d:a1:99:18:cc:7f:9c:56:2a:7f:51:ed:7d:8d:
32:e2:88:ed:5d:92:1c:01:8d:04:d6:92:5e:e8:08:
9f:23:41:04:b0:78:a8:3f:c0:75:84:a0:c6:35:f8:
9f:56:26:bc:52:81:48:eb:54:31:31:d0:8e:31:cd:
b7:f0:2d:71:b6:ec:ac:e2:4d:33:81:a6:47:96:11:
77:02:ea:80:06:fc:e6:b7:ab:74:f2:16:e2:3b:8d:
dc:26:7f:08:7d:1a:da:43:e7:9a:32:6d:87:fa:97:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.216.0/24
IPv6:
2001:67c:e9c::/48
2001:67c:ea0::/48
2001:67c:ea4::/48
2001:67c:ea8::/48
2a01:e900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214770
Signature Algorithm: sha256WithRSAEncryption
74:ed:da:2c:b3:2b:4d:ef:39:ab:8f:51:e2:aa:f7:31:17:7d:
31:f2:23:b9:6d:86:c9:7f:e1:bc:9c:04:c3:77:4f:35:62:cf:
00:72:36:36:3f:72:15:91:78:6d:8e:e2:3b:0b:e1:fb:b4:5b:
0c:6c:64:61:f7:6c:f0:bc:b5:cf:6b:6d:06:d0:7f:1d:6b:50:
4b:26:4a:33:08:06:55:11:ee:2c:a5:e1:80:26:41:ab:22:d0:
8e:00:c5:fb:1d:a7:13:df:c6:9a:48:01:75:7b:81:35:a9:70:
75:99:7f:da:44:f8:d9:1e:20:32:1b:e2:f5:bf:76:ad:7e:35:
a9:c0:2f:8e:c4:ea:a8:e6:e4:7a:55:c2:ea:9a:89:fa:70:be:
f4:e5:2b:9e:57:36:08:6a:9b:fb:a3:12:f4:d7:9c:d7:96:a8:
bb:62:ee:e1:29:85:10:6b:89:1b:76:c7:50:72:c4:9c:5a:43:
2a:6b:ce:68:71:f2:7e:d4:79:bd:52:01:b7:fc:56:6e:8a:c0:
36:43:39:9f:ce:84:17:57:50:07:4b:61:b8:b2:7d:3f:cb:3a:
96:c6:56:58:cf:12:22:aa:1e:20:91:29:cc:49:39:02:51:7a:
a1:ff:3f:41:c2:5d:13:5a:db:f6:d8:ce:d6:91:d7:b8:dd:f2:
87:28:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:46:53 2024 by rpki-client on console-ams.rpki-client.org