Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
File: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer (raw, json)
Hash identifier: y1SMfYKD+K/op00UG8FyCvZmslc53lf7+5BBgeYjyzQ=
Subject key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC7BB26B769B5539E8A16A0F2EFD6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209529
IP: 185.228.220.0/22
IP: 2a0e:70c0::/32
IP: 2a0e:a540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7b:b2:6b:76:9b:55:39:e8:a1:6a:0f:2e:fd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:8b:d3:dc:1f:c1:a7:2f:67:17:51:88:6f:
fc:7c:9b:c1:32:10:d1:7a:c3:57:cd:e5:51:7c:09:
4e:eb:0d:87:87:59:cc:e4:93:92:04:48:fb:3f:27:
b2:5d:61:db:3b:f2:8c:6f:97:f5:da:37:3f:0e:57:
1f:53:b3:2a:5e:0b:24:f8:bb:59:9d:4e:f2:df:e0:
51:67:69:fd:93:39:d7:e4:75:5e:2b:b8:4c:06:10:
7a:ea:9e:ee:25:d5:e2:4d:0b:d6:ea:f1:5b:69:40:
85:83:a1:a3:58:19:4f:a7:02:1a:45:b4:cf:67:75:
6b:a9:4a:3e:15:68:75:b5:f5:20:12:0e:f7:4f:b9:
a7:5c:41:fc:c8:e2:b4:c9:e3:42:33:20:39:87:2c:
6b:ec:c3:94:16:f9:dd:07:74:a4:db:d8:b9:5c:c2:
6b:20:20:4a:aa:a4:69:31:b9:1f:d6:29:aa:ad:ad:
5e:bc:fa:98:9c:52:52:b9:f3:b0:0c:68:77:5d:d4:
87:74:ef:bc:7d:d4:47:58:c6:64:1e:70:a1:90:bf:
f9:5e:e4:58:12:17:8c:d5:aa:6d:ff:e3:74:a2:8f:
0e:b9:c6:63:da:02:4d:ba:cf:40:a6:45:aa:b1:cd:
ac:62:33:ee:ab:6f:c1:f5:eb:0f:9b:6a:6c:53:d6:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
IPv6:
2a0e:70c0::/32
2a0e:a540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209529
Signature Algorithm: sha256WithRSAEncryption
8e:c7:2a:c7:da:ad:1b:e1:37:5a:32:78:b2:44:d8:f9:0f:22:
ed:67:2f:54:7d:f1:a6:ac:27:ed:4c:94:6c:68:95:3e:4e:02:
6e:ce:89:73:27:d5:05:2a:e8:69:93:84:33:7f:6a:8a:99:f8:
a3:8f:f3:30:5d:85:ee:0f:96:88:24:71:91:52:66:d3:2f:e4:
58:2c:f0:ec:96:0e:ea:3a:c7:9d:1f:09:c0:31:67:c2:de:0b:
ec:8e:8c:68:48:2f:17:49:5c:7b:e3:a9:54:f3:66:e3:f1:3c:
09:96:28:f4:92:26:7b:16:37:c3:a0:5a:7a:84:92:4f:b4:65:
c3:a4:ba:3b:9c:7c:5a:c8:86:60:4f:91:6d:c3:63:f4:0a:45:
8a:7f:6d:74:6c:1e:ee:0f:21:db:b1:63:51:dc:69:90:fe:01:
8a:b4:72:95:2f:99:90:60:5a:55:0f:75:02:e9:8b:90:17:2a:
8f:89:3f:fb:7e:5f:07:44:f9:6f:b9:b7:4e:82:21:e0:31:88:
5d:bd:5b:99:af:ce:9f:47:cf:48:91:ba:88:a7:84:b1:5a:a8:
4a:42:63:27:ba:4b:57:aa:0d:5d:59:43:d2:91:98:58:f5:f8:
94:5c:15:ab:5d:6c:34:4f:39:4d:7a:60:5a:fe:97:e3:02:64:
36:d3:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:08:13 2024 by rpki-client on console-ams.rpki-client.org