Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer (raw, json)
Hash identifier: BvsrfOH0fRRs9cdrrdqpRNnmMXZXy8e/x97GmkcODLM=
Subject key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191220BDAE37F6E715920BB57F9BD8CE2AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Aug 2024 10:18:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204073
IP: 185.146.48.0/22
IP: 185.191.216.0/22
IP: 185.221.148.0/22
IP: 2a0a:2040::/29
IP: 2a0c:2000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:0b:da:e3:7f:6e:71:59:20:bb:57:f9:bd:8c:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 5 10:18:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:fd:c2:0e:ce:62:ed:25:98:74:cc:a6:4f:
b0:1e:79:6f:2d:3b:c4:30:87:5f:0e:19:c4:f6:5a:
9c:a6:58:ae:08:ec:f2:4a:9b:d2:fa:ed:b9:83:f4:
06:3a:2b:0b:c7:f4:4b:d4:7f:ba:f0:4e:0d:9b:26:
cd:04:50:60:06:a1:3e:23:56:18:76:23:6e:6e:90:
68:59:7e:13:8f:92:be:46:06:e1:d9:dd:f5:8a:5f:
57:c9:ae:8b:9f:67:f3:fb:99:e1:e6:36:a7:70:59:
46:ae:4c:bd:15:fc:7b:24:d5:d8:97:e5:3f:fb:01:
c6:98:4b:3c:b6:ac:e8:6d:89:4a:fd:f2:16:9d:55:
01:88:67:a7:93:0e:4f:af:ac:b8:a6:74:cd:71:01:
74:ac:32:70:72:96:bf:00:d9:9f:69:94:98:cb:b8:
98:cc:dd:31:3f:a2:3e:73:e3:63:2f:f7:ce:d9:e0:
88:77:69:d1:de:60:a0:60:6c:9e:49:93:24:2f:b2:
32:96:46:95:85:7d:8b:de:a1:43:76:38:1b:3f:a8:
b8:84:9d:72:a1:54:a8:8c:ee:d6:06:c5:14:b1:ab:
9d:38:d6:ca:16:0e:6d:e8:73:25:a6:b6:c6:cc:a0:
ea:a9:37:19:0b:2d:e3:94:4a:e0:fe:ed:3f:f6:67:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.48.0/22
185.191.216.0/22
185.221.148.0/22
IPv6:
2a0a:2040::/29
2a0c:2000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204073
Signature Algorithm: sha256WithRSAEncryption
50:59:4a:69:ab:9d:a1:b5:98:dd:75:33:54:e9:cd:bb:fc:c6:
c3:4d:48:b8:28:c9:0b:d1:65:8f:2f:97:cd:f4:26:3e:0d:be:
ba:34:65:40:dd:fd:f4:b7:fc:c8:89:3a:65:27:03:fb:98:07:
75:58:19:89:64:99:16:4e:ee:a9:9c:4c:e8:8b:8a:0e:e9:6d:
b8:5a:04:88:ce:63:2b:09:92:71:fc:03:39:4a:28:fd:70:7c:
aa:f8:ba:e0:47:6a:ba:eb:79:e2:2c:89:d9:2b:81:be:4e:de:
45:3a:56:de:cf:06:33:50:21:05:db:30:ec:2e:e5:19:59:e2:
c3:93:d5:a7:9c:c7:34:b1:40:8a:e2:6d:ff:07:eb:4d:27:57:
d4:53:75:d3:fb:3f:b7:e2:14:9b:34:78:24:5b:d2:d2:72:61:
30:4c:35:59:38:63:92:09:d9:c2:1f:e6:50:41:b6:ca:37:3d:
89:f7:a6:24:f9:65:a6:01:d8:fa:84:11:9b:36:b7:f3:5a:e1:
7d:f2:29:7b:55:35:6f:ec:5a:37:8a:96:cf:4d:b8:a4:ef:95:
e3:86:a4:c3:c5:33:92:3b:77:22:67:bc:c3:c5:e1:8e:1c:32:
c0:65:6f:a5:64:1b:30:71:f5:a7:41:64:a1:b6:bd:5d:36:75:
92:56:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:54:46 2024 by rpki-client on console-ams.rpki-client.org