Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
File: Su_P7VH_FY--aMzWC3s5vl8-riA.cer (raw, json)
Hash identifier: NUFOoNu6m8yhQeKLfCB9Eq37qHhlMMYXqz+/pjcaGaU=
Subject key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC5B2AD2A841DD8A8B8FBDF8C77948
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39202
IP: 81.20.48.0/20
IP: 2a01:6000::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:5b:2a:d2:a8:41:dd:8a:8b:8f:bd:f8:c7:79:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:a3:d4:1e:18:e6:05:77:45:16:c3:e3:2b:
5b:52:a7:fb:c0:67:bf:c5:98:99:9a:b5:08:71:ea:
14:64:ad:48:d3:81:0a:a5:11:50:f5:d6:9f:67:6e:
d1:9c:3d:7a:70:44:fc:17:63:03:c5:da:be:4c:3c:
65:78:96:15:15:4b:a3:fc:6c:19:ca:29:ba:3f:df:
07:ec:30:90:61:f4:87:96:63:b6:74:55:7e:05:7a:
a4:b9:c6:8f:b9:59:61:50:ea:7b:d3:77:03:29:dd:
11:91:36:35:47:e5:68:52:47:53:f1:05:2c:c4:2d:
b5:d5:a8:d1:27:35:36:34:9d:96:6b:eb:ff:d9:4f:
df:29:f7:2e:e8:e7:20:85:8b:fa:e0:60:02:28:1e:
66:5a:b1:c8:13:b8:6e:24:a3:8b:41:fb:61:a4:21:
47:2f:f9:43:4c:41:55:16:79:19:d0:69:0e:96:0b:
ff:4e:70:35:f4:0c:80:65:6b:49:5a:28:ea:e0:2d:
c3:1f:98:82:34:94:ea:0f:bb:f5:84:22:d2:20:e0:
cb:0e:14:d8:9c:08:b8:f8:03:65:06:b7:4c:9f:b1:
82:5f:ae:87:a6:24:db:05:8e:c0:65:e0:39:a2:a4:
4d:44:90:3c:86:a8:03:34:3f:f7:bc:a1:ba:9d:80:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.48.0/20
IPv6:
2a01:6000::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39202
Signature Algorithm: sha256WithRSAEncryption
95:09:1b:ec:12:a8:6f:ab:63:6b:23:6c:87:23:d3:b0:f0:53:
e9:0b:a5:29:3c:9b:c9:7d:62:ec:c9:d6:2a:d3:fb:7e:65:ff:
33:ca:15:a1:b4:f1:21:ec:0c:c1:03:87:50:63:a0:31:eb:5b:
90:e5:b9:13:9c:a0:68:39:4e:a4:c3:9c:e5:e4:d0:14:85:b5:
50:74:06:96:e7:85:4f:21:b0:7b:bd:42:11:95:df:77:19:cc:
0f:79:6c:f3:f3:0d:19:db:dd:c3:9d:d4:bd:0d:f4:59:3a:99:
fd:b9:15:1b:e5:29:0d:22:a0:c1:4c:cc:f6:8a:25:cc:6c:36:
cf:c5:1f:9b:17:3a:4b:4d:2f:58:da:a7:44:20:1e:29:c0:40:
e6:bb:a5:cd:d9:c1:6f:7a:8f:c5:9d:78:31:c0:86:17:75:d9:
fa:c1:65:65:0a:10:83:51:39:42:14:4f:c4:dd:83:0d:f1:a7:
6f:2a:69:50:62:18:b5:cc:62:31:6f:7c:35:7f:de:61:39:bf:
0e:4a:db:9e:57:f5:59:af:14:43:8f:cb:ff:62:43:9f:37:66:
a2:91:49:10:54:e9:cb:bd:8b:aa:1e:b9:da:a2:e6:6c:e5:b2:
dc:a6:3d:b2:be:c5:95:16:97:f7:a1:b1:32:67:bc:2b:b8:a6:
41:f2:a1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:33:21 2024 by rpki-client on console-ams.rpki-client.org