Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer (raw, json)
Hash identifier: j81VOcP8STP9rto/vmzlaeDURpuNJW7i677+Kc5rO/s=
Subject key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC9F92E2260460AABF1664E1802303
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198623
AS: 207339
IP: 37.77.192.0/21
IP: 37.123.248.0/21
IP: 193.104.81.0/24
IP: 2a00:ce40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9f:92:e2:26:04:60:aa:bf:16:64:e1:80:23:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:e4:2c:cb:0b:13:78:5a:d1:e6:e6:9b:93:
42:88:a3:33:42:d3:31:39:8e:70:23:6f:26:64:2e:
cc:20:94:93:e7:7a:99:f2:d0:59:59:2a:bd:29:66:
d1:f6:00:51:be:26:6d:cc:01:df:63:5d:d3:6d:c6:
61:1e:9f:56:2a:68:cc:a7:70:ab:eb:41:8d:dd:0b:
ca:cd:cf:d9:95:2b:7c:75:e8:5f:e9:c5:a2:2f:85:
5b:d3:44:7c:31:e1:37:0a:a3:2b:4c:f3:3a:f6:d7:
7f:97:5a:37:17:ce:72:81:5b:f6:0d:a6:d3:76:01:
66:a8:7d:42:fd:ee:37:ff:b0:d2:62:6b:99:75:94:
49:0e:0b:50:1f:8d:95:91:fe:9b:67:94:27:f7:dd:
0d:d4:32:51:37:40:7a:b6:3f:80:81:58:22:d1:18:
5d:a2:71:9b:6e:2e:79:6e:4d:97:2d:df:47:d0:b2:
15:02:1a:40:25:8d:69:55:f0:61:72:aa:04:10:fb:
d6:5b:1b:28:7e:ea:0e:d6:cd:fb:66:5d:68:2f:60:
21:d2:82:e4:2e:ba:57:bd:23:81:c0:c2:6d:40:d6:
a8:be:f1:0e:8d:36:c7:b9:26:1f:4f:bb:87:b0:b5:
02:32:e7:9c:ca:a6:f3:f4:50:7c:47:03:2a:6d:54:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.192.0/21
37.123.248.0/21
193.104.81.0/24
IPv6:
2a00:ce40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198623
207339
Signature Algorithm: sha256WithRSAEncryption
85:45:a1:d3:21:c3:e0:bb:03:ad:26:f2:b4:3c:59:06:ad:18:
a0:8b:14:f2:13:2d:71:35:8e:87:a0:07:6e:a4:b8:bd:ee:7d:
1d:65:24:3b:1b:c8:a8:21:e2:53:50:c6:23:38:26:38:7d:34:
39:17:b4:d5:26:c8:96:4b:bb:fe:69:ed:a8:71:3d:3b:21:31:
6e:29:36:e8:85:0a:77:a7:8d:1a:32:5c:ae:52:c9:15:f6:1f:
d0:8c:aa:1c:33:2d:20:aa:f1:61:3c:16:8b:8f:9c:09:f1:3c:
27:c8:ce:f1:18:73:c7:a5:ad:5d:8d:c6:3b:01:8f:59:61:42:
af:d1:d8:aa:a9:21:b3:81:4d:eb:23:f3:53:1d:ad:f9:93:ef:
3b:6c:35:3f:af:c3:b0:eb:2b:13:48:aa:2a:45:2f:50:85:cb:
43:ef:b1:b5:18:ca:58:0f:7e:85:08:ad:fd:40:38:b2:31:0e:
d9:22:8c:09:58:97:13:85:17:d5:d6:44:2d:97:c4:c3:23:51:
ed:43:c4:fe:53:e3:be:38:54:51:6a:56:04:d7:04:be:21:68:
28:2b:00:33:45:85:a2:be:f7:42:17:a3:fb:17:90:63:29:31:
14:0e:e6:b2:1d:cf:d8:86:fd:2f:52:fc:e5:77:ea:97:0a:30:
ad:eb:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:10 2024 by rpki-client on console-ams.rpki-client.org