Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
File: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer (raw, json)
Hash identifier: VzqX0An3EL1omzvEEM0SWd0LgkLvypiYwd23F6pRINk=
Subject key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42474D1013488D88C4DFA485B4C6D1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211623
IP: 185.253.58.0/24
IP: 2a10:b9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:74:d1:01:34:88:d8:8c:4d:fa:48:5b:4c:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f8:f2:a4:c1:99:08:20:3d:02:a9:79:55:21:
8a:cc:51:38:57:a3:54:c4:4f:b7:cc:1b:b6:eb:91:
9d:3d:44:c8:8a:dc:92:5f:90:77:b1:c5:8a:08:b3:
92:7f:f7:ae:db:f0:d7:9f:53:ba:43:64:e2:4a:76:
be:b1:f2:5d:12:20:bc:8c:28:bc:5b:cd:77:d2:e2:
34:e7:3c:26:94:06:d5:26:ed:a4:e3:c5:43:c6:ab:
9f:43:62:7a:de:37:26:ed:04:f8:69:c6:57:bb:97:
25:72:a5:e4:bc:62:78:4d:a4:5a:94:52:b1:6b:21:
36:eb:13:1b:13:a7:d2:a6:a8:09:3b:59:bd:74:fd:
bc:9c:81:23:8b:55:c4:bb:c0:57:e4:43:b6:f1:16:
3f:6c:33:7f:a4:9d:3c:99:fc:b1:96:76:1d:ad:49:
d6:43:e9:48:5c:a4:66:90:8f:1a:3b:02:76:a0:e8:
d6:b9:57:28:c6:44:40:d4:01:76:57:24:11:97:38:
c8:ad:22:b7:e4:b3:70:d4:1d:af:f2:3f:64:f0:11:
cd:51:e6:07:62:d5:3d:de:0d:d4:81:39:b7:11:3d:
13:b2:31:60:31:3d:75:f1:45:b8:0e:5c:81:24:63:
84:9e:fd:16:3f:6a:9c:01:40:0e:97:6e:89:50:3d:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.58.0/24
IPv6:
2a10:b9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211623
Signature Algorithm: sha256WithRSAEncryption
b0:37:45:b0:18:12:f7:99:61:a6:ed:d8:2a:f5:84:f6:09:74:
8e:a5:97:0b:e1:2d:c4:64:fd:d8:b9:ab:08:56:b1:21:6e:27:
7a:c5:e6:25:01:c0:47:84:fb:8a:9a:12:5d:98:67:be:fa:54:
63:b6:38:7c:11:b1:e1:37:cb:6f:0a:32:3e:df:ad:7a:f3:d0:
ae:a8:75:1d:90:15:70:e2:c3:91:94:f8:7f:0e:29:b5:f5:27:
bf:93:bb:56:f5:1f:8f:6c:78:b3:f8:8c:24:bf:bd:05:f6:1d:
ef:bc:78:25:8d:9c:5a:19:29:7f:ef:80:80:34:57:41:d9:60:
ba:ff:f1:eb:b8:d6:08:79:d7:a5:b6:b9:d9:c7:b9:1d:28:5f:
15:b8:5c:18:4c:5b:50:44:1d:8b:99:bf:b4:a5:bd:b0:62:0a:
e7:77:30:c1:b4:02:b0:50:10:1e:7e:8b:1b:d2:c6:7c:20:52:
c3:36:69:f6:b0:8f:14:20:aa:ec:38:7c:75:00:2e:81:0c:87:
74:c5:a6:a3:ea:5b:ab:b7:16:b4:4d:ae:bf:f8:c4:d3:f9:89:
80:6c:4d:b2:f7:83:98:42:ec:47:c9:aa:dd:ed:0c:c0:1c:c4:
3e:14:e3:8b:27:01:f2:ae:5d:33:b6:1a:41:33:8b:e6:8d:cf:
51:a4:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:40 2024 by rpki-client on console-ams.rpki-client.org