Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer (raw, json)
Hash identifier: YyU8yQG2o0dLAFqRFcjI1rK+BxK1JfUeeB4D9b20n50=
Subject key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7942E75C984ED590F7032AD508E1A47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209015
IP: 45.10.200.0/22
IP: 2a0e:4500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:2e:75:c9:84:ed:59:0f:70:32:ad:50:8e:1a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:38:9f:88:4f:0f:ed:67:c5:e2:00:77:1f:
65:98:e8:78:b1:26:53:40:71:f9:10:b8:86:9e:fa:
b6:1e:06:55:4a:f2:06:29:76:c8:51:62:1f:88:61:
c4:dc:74:2e:96:d5:8d:dc:ff:4e:0f:4a:8c:fe:56:
fa:ec:9d:d3:a1:8a:50:af:f6:b7:80:62:08:0e:63:
55:33:f3:7c:82:49:00:d9:da:c9:90:4b:be:bf:f9:
e3:3d:f1:03:3b:23:ed:c8:0e:b6:fb:34:93:18:46:
84:c3:c1:61:b3:c8:a9:10:56:68:05:86:db:7f:8b:
c0:9d:a2:89:91:55:77:8e:1f:6d:a3:78:64:eb:30:
3e:f8:3a:44:52:a4:41:7b:1c:d8:3e:93:62:e6:ea:
22:0b:fa:e8:59:b3:88:3f:08:0e:a8:4e:94:d0:9f:
94:68:ea:47:00:e0:3c:19:02:3f:37:de:08:a0:7e:
bf:6c:77:bb:8e:e0:fd:ef:0a:4a:12:73:2b:2c:54:
df:9f:89:ba:d4:b0:0a:d9:90:b8:c4:3d:81:31:03:
49:62:5a:1f:24:67:26:9a:09:9f:b6:be:9f:e6:fe:
b5:c1:f7:9a:00:05:00:bf:90:53:0c:8d:f0:18:24:
79:0a:ff:fd:f2:b2:2a:e5:ae:ac:01:19:8b:a8:8e:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.200.0/22
IPv6:
2a0e:4500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209015
Signature Algorithm: sha256WithRSAEncryption
13:74:dc:74:55:5c:ac:b1:2b:19:97:72:33:43:5b:fa:e4:af:
4e:05:c9:63:27:62:e7:ff:d7:d9:d9:4b:54:f2:05:2d:3c:ad:
ff:d7:5b:2e:e9:1d:bb:ed:38:4e:4f:17:d4:ca:d2:db:48:b1:
2b:dc:42:8d:f7:29:b0:93:56:d6:0b:ed:08:7c:1c:2a:4b:dd:
a5:eb:df:09:89:16:77:67:7d:b1:58:57:30:8e:47:77:82:69:
71:7b:37:63:d9:48:6d:27:56:01:65:00:43:d9:b0:3e:bb:dc:
0c:5f:f9:63:dd:09:78:5f:29:72:a8:ed:b0:bb:cf:52:62:39:
af:f0:c9:e3:1e:c9:7d:33:cc:b5:40:71:4f:fe:c4:15:99:d9:
54:f6:fc:9a:02:36:60:34:a9:34:f4:1d:d9:47:b6:1b:3e:f6:
99:59:8b:a8:bc:45:b4:1b:42:a9:19:d3:50:8c:ba:97:90:db:
97:17:80:47:95:a8:64:38:eb:d1:60:52:4a:44:19:1c:f4:89:
25:29:c9:14:c1:60:41:2d:84:b3:a1:44:12:43:ff:7f:7e:7f:
a4:ee:4d:62:9f:eb:02:bf:f1:33:bb:25:bc:71:38:67:d1:40:
cd:cd:f4:cc:7c:d9:ea:29:25:e0:c6:60:1f:3b:c9:e1:34:05:
e8:2c:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:06:18 2024 by rpki-client on console-fra.rpki-client.org