Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
File: RK1W7mAdrD36Yd_lLL9bALe3opA.cer (raw, json)
Hash identifier: V7+CqILJWX6m04J65p7ND7E0oNJqm4XRH6WLxvRF2SE=
Subject key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79431B942D606F3F29DDA4D33AF1E03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60133
IP: 91.198.135.0/24
IP: 2001:67c:578::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:31:b9:42:d6:06:f3:f2:9d:da:4d:33:af:1e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:7c:09:f3:3a:e7:cf:81:e0:22:8b:11:87:
ee:91:78:da:f6:e5:8a:fd:98:f4:82:88:9f:24:1e:
c8:8a:c5:dd:aa:89:c8:9a:4b:7f:d3:83:bd:fb:f7:
2f:d8:0f:15:88:f4:cc:16:b0:8f:ed:cf:cc:ec:63:
77:9e:02:ec:2f:cc:bd:66:2c:b7:4d:94:88:4f:e3:
29:71:35:a6:cd:1b:9e:99:b6:d2:f9:30:e0:b8:64:
d0:42:fa:5f:23:37:68:e4:e3:95:a4:a2:ca:73:20:
25:f5:99:6b:dc:69:36:79:b1:e0:60:11:f1:ce:d6:
fd:4f:e4:e8:80:51:97:84:69:c2:99:5d:6c:58:7b:
59:10:9d:73:50:ab:06:30:9a:45:3e:01:42:57:21:
7b:e6:da:2d:91:b4:f9:73:65:0a:61:7b:b0:fe:27:
8b:df:18:ea:a0:a3:a1:24:7b:87:2c:b4:fb:93:53:
fc:cc:18:8b:61:a4:8b:e1:3f:eb:1e:ee:37:eb:23:
cf:8d:19:97:1f:06:6d:19:55:54:2f:f4:c3:c5:26:
60:7c:5b:96:35:05:a3:f3:b2:dc:21:63:02:07:26:
02:bf:2f:f7:7a:1d:f2:c6:9c:d7:dc:1b:d4:36:01:
2c:81:10:5b:80:d4:06:a2:de:34:f5:2b:c1:89:62:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.135.0/24
IPv6:
2001:67c:578::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60133
Signature Algorithm: sha256WithRSAEncryption
89:af:74:4f:9b:f6:8a:1e:b0:a8:cc:34:e1:f1:ca:1e:fc:10:
b9:d6:b6:40:e7:7e:70:b6:fe:dd:4d:d3:c0:c3:4e:09:38:d4:
83:54:43:b7:8a:f4:9d:dc:ba:93:cb:bf:59:83:70:a1:1a:96:
e9:70:56:65:95:1f:9e:85:30:46:17:b1:fb:90:b9:86:25:43:
bd:bd:2b:dd:72:f0:8d:64:c3:48:5b:14:01:37:9d:d9:ae:24:
a3:21:e2:51:87:6c:5c:96:36:0f:13:ef:fb:4b:d2:04:51:4c:
b1:b9:d1:ad:3f:41:1a:a2:65:47:fd:38:10:2a:9d:44:9c:8e:
a4:17:d3:dd:9a:de:bc:e4:08:22:e4:a8:da:fc:8d:81:2f:73:
09:f9:bb:9d:c6:b8:be:e4:ea:06:55:bf:5a:1b:42:f8:87:29:
2a:4a:b0:ce:7d:6f:91:21:de:68:e9:35:df:70:63:d5:d8:45:
80:b7:40:27:05:82:c7:b3:c9:d0:d6:b1:99:92:7f:67:1b:3d:
c2:7b:c3:59:36:ce:d5:a6:a3:b8:d7:20:85:4b:d8:82:0e:c9:
e0:8d:24:f2:9b:c4:a3:2c:58:a8:f7:5d:ff:ce:e0:9a:ce:b4:
7c:4c:83:e5:70:61:6a:c4:d8:fd:92:25:7f:26:e2:8d:f4:9c:
8e:1a:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:00:19 2024 by rpki-client on console-ams.rpki-client.org