Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RAk01RfFBkEklrgIt98lyg_WRV8.cer
File: RAk01RfFBkEklrgIt98lyg_WRV8.cer (raw, json)
Hash identifier: giY79jbn5YPNODd5h19h3gMklgF0h2N6oilAcq/idX4=
Subject key identifier: 44:09:34:D5:17:C5:06:41:24:96:B8:08:B7:DF:25:CA:0F:D6:45:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC89CCFA08DE4426E3BB583BF0A618
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210173
IP: 194.146.0.0/22
IP: 2a0d:9140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:89:cc:fa:08:de:44:26:e3:bb:58:3b:f0:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=440934d517c506412496b808b7df25ca0fd6455f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:3d:13:32:d1:22:e6:36:60:13:db:af:d6:
9c:38:f0:41:54:5b:6b:70:6a:2a:f2:59:3f:be:c9:
c9:d8:a9:83:3c:2d:51:7e:c4:5e:19:ef:f5:f0:2f:
2b:7c:09:32:b4:5b:a0:3c:80:d7:21:c1:33:9c:6b:
e7:89:d1:69:b7:57:f6:73:de:0a:62:23:a4:fb:d5:
c9:54:d1:ea:a3:d4:32:13:c8:30:e8:5e:7d:52:a1:
f8:ae:8b:8a:aa:6b:e2:33:a0:f8:64:7d:b5:f9:f8:
cf:a0:97:06:7e:0a:85:d0:3b:49:4e:67:7f:52:3f:
00:0c:00:c5:e0:74:b2:80:0b:d3:18:bf:5a:40:1a:
ae:98:73:be:30:d6:53:8b:fa:03:36:64:ee:57:c6:
79:b3:32:62:e9:ea:89:06:af:0c:fd:74:ee:d4:3e:
4b:2c:87:11:de:1e:86:4a:c6:aa:7b:c5:ca:68:14:
1d:dd:3d:e0:21:46:7d:ba:1e:7a:a0:3f:72:9d:14:
a0:86:b3:e2:b8:c3:fa:22:6d:ac:31:da:37:b6:62:
68:58:85:4c:bb:46:67:94:42:b4:20:7a:b9:51:58:
54:3a:fd:90:66:4e:d5:31:92:59:34:20:df:f6:79:
10:ca:e3:71:e1:a0:61:26:b8:2b:39:e5:3e:d7:9b:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:34:D5:17:C5:06:41:24:96:B8:08:B7:DF:25:CA:0F:D6:45:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.0.0/22
IPv6:
2a0d:9140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210173
Signature Algorithm: sha256WithRSAEncryption
84:30:7d:1a:ac:56:c6:16:82:b8:a4:86:5e:2d:b3:22:b8:1a:
33:a9:85:ec:4c:a1:80:2c:1d:90:80:30:eb:3b:63:14:20:3d:
62:11:cf:0f:59:db:78:5b:1c:36:c5:b0:73:11:ab:55:e9:88:
70:bb:4a:49:44:f8:a5:27:24:b7:b0:51:f5:81:d5:0f:31:f7:
4d:39:6c:59:2f:df:ba:e4:f5:32:ad:84:21:57:99:71:e1:02:
10:25:0f:f0:9a:18:52:b4:9c:ad:9c:b2:db:00:c2:76:67:67:
ee:f4:c8:18:f7:36:23:a4:a2:b4:95:23:29:d8:5b:bc:d5:de:
dc:6d:e3:45:f4:f5:95:8d:ef:3f:9c:0a:d4:01:ec:f7:d6:21:
2f:6e:a4:48:d7:af:e7:a2:1e:d5:6f:79:a8:5a:ee:25:c8:d1:
56:bd:9f:5a:0b:54:0f:70:65:65:3d:2b:fb:d3:91:28:96:43:
92:4b:a6:ac:59:d9:0b:19:21:59:57:2e:4f:61:e5:c3:02:b0:
c7:c9:9a:a0:18:c4:a6:39:15:64:97:24:2a:a7:c4:b0:b9:46:
03:db:bb:98:0f:42:a4:02:22:13:97:4f:1f:e8:68:f3:20:b3:
0d:e2:cc:22:02:6b:93:c3:3f:df:bf:5d:59:dc:76:58:7a:71:
a5:dd:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:43:40 2024 by rpki-client on console-ams.rpki-client.org