Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
File: KYijxojo6x_vBsN0p6pc-P13jg8.cer (raw, json)
Hash identifier: 0LJ2rzB07hCoTucttxNWE8A2dIrC0sfVA17sYQIzR8g=
Subject key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC020928A150C17DC658520AED9B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25106
IP: 46.56.0.0/17
IP: 46.216.0.0/16
IP: 134.17.0.0/16
IP: 176.60.0.0/16
IP: 178.168.128.0/17
IP: 185.20.112.0/22
IP: 2a02:bf0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c0:20:92:8a:15:0c:17:dc:65:85:20:ae:d9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:64:0a:6d:d1:fd:3e:d2:e7:17:05:89:97:
df:11:2d:63:3b:19:5e:9f:5d:ee:dd:9e:e8:9d:01:
ce:26:06:83:cb:54:25:23:45:68:c1:8c:ef:a2:7a:
e7:65:e1:2e:b1:d3:2c:1e:a5:13:57:29:a7:de:fb:
42:28:b3:c8:d0:3c:62:80:19:13:1c:73:3c:b7:b5:
21:c6:41:ff:f1:1e:36:f2:db:1d:50:97:a5:38:47:
32:d0:43:82:fb:a6:2b:78:53:fe:72:01:62:68:5e:
38:a2:a9:57:a1:14:49:e0:8a:5d:2c:06:66:75:e9:
99:02:46:ff:7e:64:4d:5d:1b:38:35:3f:a5:51:88:
35:e8:2b:ca:a6:8c:72:33:b2:8d:cf:1d:b7:ca:c3:
ce:40:a5:dd:44:90:1c:1b:eb:ac:97:41:45:4f:f7:
15:49:cb:c4:bf:84:53:c5:97:2a:bd:7a:9d:18:95:
d6:cc:50:a0:99:a7:14:da:88:08:25:df:ca:b8:fb:
59:7e:02:ec:98:bd:0c:5b:d5:db:6b:4d:11:7e:e6:
b4:8e:13:55:bf:68:5a:b2:1d:77:75:4a:27:45:31:
20:c6:7d:f2:be:b2:e9:0b:03:a1:53:86:03:be:05:
bd:96:a5:cc:e7:10:c4:fb:49:31:c7:bf:a9:fd:7c:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.0.0/17
46.216.0.0/16
134.17.0.0/16
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25106
Signature Algorithm: sha256WithRSAEncryption
2e:04:9a:6c:a9:10:05:8f:cf:94:78:45:30:22:48:0e:47:ac:
9c:ab:3b:af:94:65:55:e3:2d:28:35:b5:e1:d7:83:3a:79:ad:
d0:12:89:86:f3:ba:d4:3d:6a:15:08:db:11:21:c4:49:09:e9:
e8:7b:37:da:cc:87:ff:1d:b2:62:73:6b:8c:80:03:cd:b4:2e:
2b:e6:a6:9d:c8:19:49:11:5e:06:98:fd:33:0d:07:ba:b6:a7:
d8:b8:e5:f2:ee:39:b7:8e:28:8e:ab:9a:da:c7:f6:d4:b7:c0:
ac:09:9a:35:05:fc:79:bf:2a:fb:0c:61:de:41:15:4b:8d:d5:
14:49:ec:89:d6:3d:a7:33:28:a7:34:5d:c1:cc:fa:af:d7:ab:
70:9f:d0:c0:b3:41:e3:48:ae:10:5f:6e:dc:4b:d1:db:6d:6b:
56:df:db:3d:f3:bd:5f:78:2f:a7:27:c5:ea:83:3d:23:4a:be:
cf:30:19:52:51:06:c6:f9:7e:28:29:14:48:2d:bb:2f:f8:fe:
7a:56:6d:04:66:ed:ca:2f:ff:68:ce:cc:69:e4:ad:da:9f:e4:
7a:68:e8:d9:0e:05:7d:3d:56:e8:58:48:ab:e4:20:01:e4:d9:
50:26:58:a0:9b:52:b3:ec:79:ba:c3:b4:f2:af:5b:32:c7:44:
df:19:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:52:49 2024 by rpki-client on console-fra.rpki-client.org