Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
File: _aZpttXiJAUBetNZh8xXrJYjnJo.cer (raw, json)
Hash identifier: 1sMG8wkwxID9qORGxT4iB0ntjyTfiUGiO0OJGQIzEg4=
Subject key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49361B8A4E09314A2CEE8F2586716C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25292
IP: 80.247.32.0/20
IP: 2a05:f0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:61:b8:a4:e0:93:14:a2:ce:e8:f2:58:67:16:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:20:f9:75:01:e5:5e:ff:37:f8:f1:31:85:
16:1d:b5:eb:69:df:e5:43:90:2a:04:19:31:18:42:
88:44:72:c5:39:7f:20:e6:cb:d8:0a:85:5c:fa:f5:
87:85:13:9f:44:73:b0:5c:9c:c2:88:09:33:b7:ae:
c2:2e:f7:f5:f3:f6:b9:a4:11:2e:6e:ce:50:34:6b:
7a:2b:88:cf:ad:67:83:cf:3a:12:9c:3e:0c:1a:56:
9b:78:7c:20:17:de:8d:b1:5e:a5:12:27:57:54:a0:
b7:5a:07:31:48:9c:36:bd:f2:10:e6:61:20:db:3e:
e2:16:61:fb:c1:52:b9:de:ee:3c:0a:43:ad:0d:66:
26:d7:39:8b:01:18:05:c2:a0:f8:fb:8f:60:d1:d0:
97:a6:50:45:40:48:33:d1:61:5d:e1:37:25:fd:2e:
d4:73:48:d9:88:ee:a1:18:15:76:17:a8:87:44:bf:
df:e1:fe:a7:d6:30:e2:f3:42:fd:a0:bb:10:5e:9d:
62:30:8c:3a:70:10:a2:3d:33:da:13:68:d9:3b:57:
ad:33:01:10:5d:ed:b8:ed:e6:ce:03:df:79:f8:f8:
8a:53:b5:26:d5:bc:d3:19:dd:37:ad:1d:99:2a:8b:
5d:6c:7c:58:3f:d8:c9:88:f7:01:d5:bb:fe:42:31:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.32.0/20
IPv6:
2a05:f0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25292
Signature Algorithm: sha256WithRSAEncryption
53:cf:60:8e:28:76:aa:7e:49:86:2d:35:cd:05:e1:04:fc:97:
73:ba:bb:de:86:21:59:0c:3b:c9:aa:e7:37:d0:82:7f:bc:6f:
02:64:c3:d5:84:bf:75:6f:25:9e:76:28:3b:da:5b:72:d5:b1:
d1:d5:fc:41:6c:8c:70:b5:cf:01:ec:8d:63:26:e2:97:b6:13:
5a:54:86:3e:2e:ea:bc:bf:34:ba:6a:7a:94:61:a8:32:45:94:
cc:ee:90:b2:71:63:a6:5d:90:1b:90:84:28:df:95:1a:56:96:
84:d0:1f:e0:9b:c0:c2:c5:61:36:f6:04:1b:27:0a:d8:6b:12:
d7:e3:2b:50:5d:99:6a:7f:68:a1:b2:e1:ef:3a:38:9d:11:47:
92:63:34:a7:aa:86:9a:93:c5:28:56:2a:3a:af:d1:2c:98:dd:
78:0d:b4:01:fd:4a:47:5c:31:a3:82:4b:d2:8d:bd:2b:2e:5a:
13:a5:0d:b8:05:42:45:d8:85:45:31:f8:2a:35:91:11:f2:3f:
56:b3:fc:e3:c1:d9:41:bc:74:36:35:e1:00:3f:dc:8a:c3:8c:
54:e2:e2:f2:93:59:02:22:cc:16:08:6a:30:c4:09:f2:86:c6:
09:e7:5c:16:4c:89:fe:a0:5d:27:3a:64:14:0a:f6:1a:c7:3e:
6f:b5:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:25:21 2024 by rpki-client on console-fra.rpki-client.org