Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
File: KY60_lwZ8pLyiSTL8VVaj1do2CY.cer (raw, json)
Hash identifier: 1d5QS/XCw1s5oB3bpnaRc5Zn3UJwuuuYP4IZKhldJ3o=
Subject key identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9234EDDA8053404A915D0E9B6F265
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41563
IP: 89.254.128.0/18
IP: 185.182.92.0/22
IP: 2a09:2ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:23:4e:dd:a8:05:34:04:a9:15:d0:e9:b6:f2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:72:f8:62:7d:cc:34:96:96:36:ae:99:7e:
f7:25:06:25:c8:46:3a:75:54:1a:00:6e:1b:aa:3b:
1f:ae:f1:1c:82:54:11:18:02:d5:ef:32:4a:05:b5:
d0:3d:ee:d9:43:11:93:70:6c:2b:7e:ea:18:bb:4b:
11:56:aa:f6:80:3b:06:f8:8b:50:51:de:a3:46:34:
4b:cc:8b:88:51:bd:5f:f7:cd:ba:64:a8:c2:7e:ee:
ca:d1:30:19:b2:f6:6f:61:2d:76:fe:89:c2:b5:97:
8e:85:07:bf:bd:79:29:b8:4e:1d:92:41:8b:ce:73:
d7:f1:a1:8b:f8:4e:85:d7:40:ff:4f:a0:1a:e4:89:
08:a1:b6:81:48:66:39:c1:8d:32:fa:15:0e:b9:b0:
6a:65:d6:8a:4f:4c:ea:0d:03:a4:05:18:7d:12:93:
7b:e3:a9:02:a3:24:72:17:83:3d:d7:b9:93:ce:2a:
c9:d4:03:e4:a1:58:04:eb:13:54:c3:2d:e1:35:73:
b6:06:ef:ab:cb:67:09:6a:d0:f3:6a:82:5a:4c:39:
a9:bc:3d:fe:68:5c:26:17:e9:71:52:10:3e:aa:2f:
4b:42:90:24:76:a3:af:1d:9a:e5:9e:01:55:16:c6:
73:2a:3f:3f:85:6a:24:64:a6:d8:8c:f8:d0:60:ba:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.254.128.0/18
185.182.92.0/22
IPv6:
2a09:2ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41563
Signature Algorithm: sha256WithRSAEncryption
08:11:15:a9:52:d3:92:02:23:d5:fe:76:29:bf:ed:05:76:54:
89:6e:c0:40:93:02:70:51:16:fe:e4:d3:1e:a6:ec:00:48:a5:
d9:9e:d4:15:e3:5d:19:c5:25:12:11:c5:93:f5:63:64:3b:80:
27:5c:09:b7:8e:8e:97:63:f7:71:a7:d6:04:0d:38:34:b4:25:
e1:59:a7:b7:5a:83:fd:8c:d9:15:91:3c:39:7a:63:88:83:8f:
b5:6e:c1:03:a1:c6:92:37:dd:03:a5:c4:8f:6f:23:7d:8f:1c:
c3:6a:c2:ec:5f:10:97:5f:f0:5f:a3:1d:d4:7e:24:ea:05:b9:
6c:86:21:dd:69:53:65:dd:28:dc:fb:56:b6:fa:b7:eb:59:ed:
2f:d7:6b:f7:39:ab:de:98:d3:4e:99:b7:9d:55:e0:2e:be:5e:
fe:4a:ae:d9:19:ad:2c:34:7d:12:a8:95:80:ec:1b:05:6d:a3:
51:9d:f5:bc:dd:d6:aa:5a:a4:09:d9:58:d5:fd:55:d0:12:dd:
0d:92:f9:6e:7a:9d:f8:d0:c7:11:da:33:60:c4:92:46:6a:c4:
df:bf:2a:36:cb:3e:e1:a9:13:cf:60:b1:d2:b8:f9:a8:39:7c:
aa:d1:fe:25:e5:eb:47:62:ab:8e:92:94:73:d1:c5:28:be:21:
6d:1e:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:39:49 2024 by rpki-client on console-ams.rpki-client.org