Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
File: P6xpra8ADdd6SwAYd8JYoh0f9qA.cer (raw, json)
Hash identifier: NU6SGs7g/ioGzDRSE95c3TphRSm7TdxbpwCkEOaIvQQ=
Subject key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A2F842413CAA7C0D6CC886A3615F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205556
IP: 185.213.180.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2f:84:24:13:ca:a7:c0:d6:cc:88:6a:36:15:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:0d:06:84:5a:be:0c:75:7c:8b:57:a9:5f:
a5:09:04:cd:07:a6:a9:e6:07:f8:27:94:33:5d:68:
c0:f0:4d:4b:66:e7:af:b6:fa:9c:49:2d:b0:c9:df:
0a:ba:c2:ac:a6:c8:01:52:ef:6d:d1:8e:b4:a9:dd:
42:c6:6e:8a:ec:a3:4c:41:f5:2f:17:26:2f:1f:5b:
2f:88:43:f1:e6:c4:9c:63:99:45:91:62:bb:63:df:
4b:42:55:69:f7:df:bb:f9:f1:bc:ed:fc:ef:d3:4a:
32:2f:9b:a3:87:12:30:f1:7e:b9:e8:19:8e:ba:d0:
4e:cc:6f:7d:bb:5d:cf:d0:80:be:23:24:63:30:ea:
5f:2b:77:6f:5b:e0:53:f1:ef:14:9f:f6:d6:99:b4:
6c:0a:fc:01:a4:3f:43:0c:7e:33:66:a2:82:0f:f1:
4e:1a:a9:41:44:25:8a:e1:d0:cd:d0:31:b2:23:8b:
a8:64:97:32:32:98:b9:84:9a:1e:6a:43:66:c2:f0:
b1:38:2a:54:4b:37:8b:7c:07:60:ad:11:b1:fe:ed:
a9:b8:22:69:4e:95:ec:bf:67:16:41:f4:5d:9a:0b:
29:c7:42:ee:84:ae:58:ad:ca:7a:3c:cf:5d:02:4a:
5b:ba:f9:a8:d9:51:1c:e3:58:3b:ee:80:e3:be:b4:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.180.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205556
Signature Algorithm: sha256WithRSAEncryption
48:60:b4:80:fd:56:72:42:3e:20:47:4a:06:51:0d:6d:87:b4:
1a:be:b6:c1:bf:79:58:6e:e7:5d:fa:8f:06:da:be:95:2b:04:
41:0b:8e:08:d0:01:f5:3b:07:bb:e2:85:af:f4:34:10:41:46:
aa:5d:6d:3a:23:d4:38:be:4e:a0:8d:02:a4:38:86:ed:2e:67:
c2:23:33:dc:21:05:f1:bb:64:fa:03:ca:91:0e:5f:ea:47:0a:
d3:a3:10:c9:df:05:36:9b:6c:78:53:d3:a2:b0:d4:21:2b:23:
6e:13:c1:9f:f5:39:56:94:ec:d5:4f:11:3e:20:ca:00:a7:48:
69:92:e7:79:e2:84:c2:cb:84:f5:76:8a:35:d7:02:a7:dc:2b:
11:6b:31:0a:11:6a:63:ce:f9:2e:1b:03:86:5d:ff:f9:83:ff:
35:68:9b:bd:aa:fb:6c:44:40:72:21:1f:a5:54:84:3d:4a:44:
c1:5b:b1:da:b3:84:9f:59:2e:e5:02:bd:84:36:13:b3:ae:bb:
58:60:26:79:27:ae:05:53:bb:66:b5:59:f7:5a:c9:c4:e2:d4:
df:69:14:6a:59:95:20:21:36:9d:2e:7c:d1:60:3c:b1:bc:dd:
7b:b1:70:2c:93:e4:5c:57:46:48:46:f6:b0:af:cf:ea:2a:a4:
ff:5f:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:56:51 2024 by rpki-client on console-fra.rpki-client.org