Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
File: KuLRf9W7nXYRETxYakEIAseF7fI.cer (raw, json)
Hash identifier: QxR/MDC/M4dy5Gs2YM8/+OyCAhCvAs8M2eH4JQMSsmA=
Subject key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A9F7468B34325463F523D962EBC0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200509
AS: 200819
IP: 185.66.56.0/22
IP: 2a05:5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:9f:74:68:b3:43:25:46:3f:52:3d:96:2e:bc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:9e:76:ba:52:70:60:2a:94:36:75:ca:ec:
8b:b3:58:11:46:4c:7c:c0:98:94:84:67:10:72:6c:
05:19:bd:70:19:f2:72:94:72:f4:6e:1a:fc:c3:c0:
91:1e:ff:e7:05:ae:d3:7d:b5:fb:c2:af:d5:7d:e4:
f0:d4:58:71:a6:2f:bc:47:e9:55:9b:6a:53:4e:a8:
e9:ec:5d:2c:c4:10:14:49:27:17:d6:6e:1f:f9:54:
fe:1b:c3:f9:ef:75:c5:f3:91:1c:b4:54:da:ea:8d:
58:94:16:65:ca:8b:99:f1:79:09:18:5c:fc:78:39:
07:75:61:15:ee:0c:e1:0f:a5:10:16:30:5b:10:a6:
81:ea:48:61:a8:66:24:e5:31:e2:56:70:37:79:c6:
1b:03:4b:97:cc:4d:b5:a8:56:60:67:9b:26:63:57:
1a:13:42:c2:a1:82:7c:bb:89:f3:1a:18:08:c1:e9:
4e:49:ed:45:93:e7:98:a1:e4:13:16:4c:c4:65:fd:
8d:f9:cd:9c:ff:83:00:2f:ac:85:eb:05:41:93:ee:
7a:6d:4c:d2:24:39:bc:fd:ee:6c:0a:a1:38:45:a3:
7b:16:20:0f:89:ec:6a:50:c6:70:0f:c2:3a:9c:70:
71:86:ea:42:1b:61:44:fb:b8:d5:48:e4:57:9b:4d:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.56.0/22
IPv6:
2a05:5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200509
200819
Signature Algorithm: sha256WithRSAEncryption
1d:f6:f3:4a:38:cb:e1:a7:ba:1b:60:fb:ee:da:40:72:17:42:
43:29:f3:9b:29:12:2b:4b:eb:46:fe:d9:c6:9c:eb:6a:c1:00:
36:d7:60:f8:ca:92:61:2b:0c:5c:2c:48:d9:26:12:75:04:29:
e6:cd:ff:72:71:94:3e:b7:4a:65:92:81:7f:6c:ea:57:67:ea:
38:95:77:ab:f7:d8:52:9d:8c:89:6e:a5:0e:0f:4b:d0:6c:ff:
f5:27:05:44:2e:5d:80:40:62:67:e9:35:be:3a:68:29:b5:61:
1f:da:14:73:60:8f:18:d1:55:04:94:21:d5:f8:63:9d:bb:81:
83:37:36:c4:b7:0b:a7:0b:dc:38:9c:5b:36:2a:2c:cd:ca:fa:
c4:0c:e1:ae:cd:e3:60:59:34:0b:73:4a:a5:c9:e6:49:a6:6d:
2c:e1:6e:ae:3d:ee:1a:7f:13:74:b0:c1:c9:eb:3b:01:93:f4:
4a:89:5f:0a:ea:8e:0d:a2:cc:fb:0f:f7:1d:b0:68:91:e4:4e:
c6:f4:cc:4d:d6:e8:e2:28:bb:8b:ce:6c:4c:22:e5:88:bf:79:
57:ed:a9:de:24:55:4e:c0:82:e5:2a:ab:93:c0:69:0c:f4:62:
eb:7e:bd:16:c0:88:7e:9f:78:2a:cc:11:ec:8b:10:a7:88:71:
f7:12:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:09 2024 by rpki-client on console-fra.rpki-client.org