Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer (raw, json)
Hash identifier: 1SGYzF+NxTUf0pDQYCjkb8HoKoxdMFRLxdWOJyglUhs=
Subject key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D40E58946A8C8578826AC50C02731
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198405
AS: 207934
IP: 185.156.96.0/22
IP: 2a03:300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:40:e5:89:46:a8:c8:57:88:26:ac:50:c0:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:81:29:4f:4a:77:a0:22:b5:71:35:62:9d:
5e:10:73:24:6e:c7:01:9b:37:44:82:f9:59:a2:c4:
1b:89:09:5d:e0:aa:68:f4:52:fd:74:0a:f9:4d:66:
d9:75:95:a0:83:6b:d3:c4:17:87:91:57:96:f7:33:
10:d0:83:27:0c:d0:cd:19:08:7b:25:f2:63:6b:8b:
d3:3b:e8:16:0c:6c:f2:b0:58:f8:a6:69:29:2d:c6:
29:2d:a3:9d:4a:53:81:1c:50:ce:df:d6:64:3a:cf:
d1:78:1e:18:bd:15:ee:71:86:bb:e3:9b:1e:45:bc:
bf:7a:70:c9:ca:10:2b:7d:fd:81:9c:ae:aa:6f:65:
f5:17:cd:ae:86:86:3e:db:77:76:03:65:24:10:ca:
da:a1:6e:dd:6e:3a:7c:48:8c:88:bf:41:49:72:04:
d0:5d:ab:04:2d:7e:17:d6:2b:7e:49:a8:1c:1a:b5:
d9:15:9e:0f:e2:db:d1:c0:0a:ce:fe:fb:6c:77:e2:
04:37:2e:92:aa:05:99:ea:9b:cb:76:20:61:ef:10:
ea:1c:b5:59:5e:0e:37:5e:98:78:a9:25:c8:4a:81:
bc:85:da:01:2e:9c:82:12:c0:37:b8:65:ae:7d:eb:
d9:5d:46:ad:6d:fa:74:5a:f4:07:19:cf:09:bc:e8:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.96.0/22
IPv6:
2a03:300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198405
207934
Signature Algorithm: sha256WithRSAEncryption
3f:90:3a:41:94:8d:88:23:51:bc:8a:b2:48:84:c0:98:5c:a3:
a8:51:2d:9c:b2:3b:70:5b:69:a6:2f:dd:dd:6f:e2:a5:63:8b:
c8:19:e8:ef:8b:06:c4:d1:12:d4:84:55:af:83:f1:a1:0d:b3:
ed:b9:7d:22:5c:f2:3a:7c:31:36:fc:26:40:ce:9b:5d:a1:3b:
80:85:27:95:ea:6e:0d:c8:52:20:02:79:19:28:b0:94:45:6a:
f4:9d:8f:0b:43:4c:0e:ab:a2:f9:1a:7e:b4:c5:be:a6:90:59:
65:2d:ab:7a:87:57:36:68:6d:42:50:1a:04:53:81:15:99:f2:
74:3b:27:5e:f0:ea:71:63:12:fe:24:3d:49:8c:71:59:f9:2c:
b2:0c:27:47:62:ff:1c:c0:1f:05:b5:66:07:89:9a:ce:75:49:
09:1b:31:6c:18:b3:26:39:f8:e4:34:b1:5a:48:17:45:c1:da:
c2:91:8b:3f:48:27:b1:ce:76:e6:af:ed:3e:6d:a4:9d:b4:8f:
18:a5:a1:dc:d1:c1:68:dc:ca:4d:c3:8b:85:1f:15:96:ec:f0:
5f:5f:c7:41:96:0d:ea:68:77:c9:4b:c6:5e:58:25:3d:37:91:
74:f9:25:ab:51:62:1e:83:a4:50:48:2c:d8:23:06:be:f0:80:
5b:3e:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:28:39 2024 by rpki-client on console-ams.rpki-client.org