Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer (raw, json)
Hash identifier: e6TVWzhrnPXfNhn5eBmmGEyEgmU5LhR1LZP/qgUazNg=
Subject key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7272859673D6FB30E37912781527B9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49127
IP: 185.85.208.0/22
IP: 2a0d:9c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:28:59:67:3d:6f:b3:0e:37:91:27:81:52:7b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:ae:35:e4:50:b4:e1:69:dd:cc:87:a8:2f:
75:38:3d:b9:0d:95:cb:b7:5a:b3:ef:30:15:8b:05:
4c:fe:14:5c:90:c3:75:ec:b6:84:a8:44:4a:f8:87:
88:1b:f3:b1:90:73:52:57:cc:a7:34:15:49:08:04:
b4:0f:22:4c:9d:ff:3a:21:af:de:5a:b6:d9:f4:df:
26:61:a7:30:3b:7a:81:c3:47:c7:48:5f:95:2b:ea:
8d:dd:61:73:85:0c:f0:38:8c:6e:8e:ad:1b:52:ee:
5a:6c:4d:64:8a:7b:0f:63:8a:f0:70:1d:dc:25:59:
f2:70:a0:1f:bf:bd:b5:47:bc:dc:83:8f:e6:b0:95:
12:4b:b8:8f:4e:d8:0b:5f:10:23:00:59:90:81:1f:
6f:57:3e:b4:87:b4:a0:93:cd:87:6c:41:cf:da:ff:
c4:cf:a6:3a:15:7b:31:b1:05:42:b2:83:2a:d9:ae:
50:d1:95:37:a5:ea:1a:e0:ca:8b:f8:81:7a:e2:15:
18:fa:bc:78:81:0c:2f:e8:3e:64:70:30:8c:27:67:
05:b3:9c:6a:f9:f9:e5:b3:73:cf:07:e3:cd:36:64:
4d:00:74:e1:88:a9:e3:46:fe:42:25:45:64:a3:de:
16:72:49:11:21:1a:a6:64:4f:cd:5f:6f:35:5f:42:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.208.0/22
IPv6:
2a0d:9c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49127
Signature Algorithm: sha256WithRSAEncryption
26:c9:48:ef:6e:4f:e9:c5:24:ff:a9:65:24:a7:92:a9:2f:7a:
d3:46:0f:43:ad:c1:e4:83:6f:1b:52:71:9a:fe:83:c7:f9:be:
b4:9f:d8:4a:0c:e2:a4:a1:16:25:cf:8a:98:90:0e:02:d3:75:
4c:b0:ea:1a:0f:74:de:7c:8f:f8:1b:4f:28:58:51:35:b1:34:
91:5f:e8:36:9e:59:37:13:5f:39:ee:b7:7e:3e:47:25:8a:fc:
68:c0:e6:43:67:dd:44:d7:12:76:6a:ca:b9:d6:d0:a2:76:81:
be:5b:51:87:e5:f6:d4:9b:03:da:d0:1e:b0:4b:c3:a2:88:f0:
45:7f:0f:57:94:a9:bd:ce:38:73:81:78:a2:eb:0a:10:9c:74:
ac:92:21:6c:27:50:56:7d:66:5c:78:7b:e6:6a:63:42:06:c8:
aa:65:ac:90:82:06:16:2e:28:47:21:9b:84:a4:e0:4d:fa:3f:
c0:ea:08:61:58:2c:23:08:c2:4e:bc:4f:14:bd:a9:9c:7a:1e:
51:10:a3:3c:c3:da:86:6d:20:f5:81:ea:20:cc:9f:c1:04:65:
f6:57:43:7a:2a:e5:bb:0f:ee:52:8d:14:ec:a0:5e:0f:e5:18:
72:92:52:b9:51:36:50:66:e9:2a:2d:6a:c5:3a:d0:b5:77:02:
0b:0f:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:35:12 2024 by rpki-client on console-fra.rpki-client.org