Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.cer (raw, json)
Hash identifier: nRukBqp33RLjyFlNfgL8SGZ93MUGqo7xnrTapJ3S0Us=
Subject key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7275C951101E3B3338EAFFF5F63865B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49229
IP: 89.39.166.0/24
IP: 91.226.181.0/24
IP: 185.12.192.0/22
IP: 185.29.172.0/22
IP: 185.34.232.0/22
IP: 195.24.230.0/23
IP: 195.88.236.0/23
IP: 2a03:72c0::/32
IP: 2a04:6040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5c:95:11:01:e3:b3:33:8e:af:ff:5f:63:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:a7:c1:b1:e4:69:0b:72:66:cb:8d:87:7f:
a5:c9:53:3a:b6:87:8a:20:09:49:5c:9f:ed:0c:dc:
bb:b3:d1:10:3e:6f:15:15:f9:a2:13:d4:a2:44:ab:
8a:80:2f:32:21:34:79:63:fc:e7:af:9b:23:0e:8d:
f5:3f:35:36:6d:fc:be:19:f5:44:af:c9:15:ec:53:
03:29:02:29:ca:f2:42:52:e0:b9:7e:ca:92:eb:60:
34:c9:af:76:0e:50:43:b1:dc:26:b0:90:0e:bc:f3:
37:b0:bb:99:db:01:66:37:3f:39:af:f8:f0:b1:a6:
13:1c:ec:06:32:9a:48:99:5c:60:f3:ea:bf:17:f2:
78:82:68:41:48:0b:5a:a6:6c:75:1f:54:b7:6d:49:
bd:7e:ed:bd:ac:2e:32:e6:2b:48:f9:10:db:18:16:
0f:27:99:0c:34:51:ab:c5:e9:83:ca:39:64:1d:2d:
2a:9f:68:95:fd:e8:7f:82:6b:0c:9f:62:2f:a6:c8:
e1:01:16:d2:c9:7a:be:91:02:ca:66:1d:cc:fd:bb:
16:b0:83:b3:fe:b6:22:3f:55:a0:4a:c6:88:ad:2c:
08:75:94:8a:40:f3:7a:fa:55:57:66:77:6e:d6:46:
97:a0:0f:ae:a5:0b:79:f4:dc:b1:6d:2e:4c:83:66:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.166.0/24
91.226.181.0/24
185.12.192.0/22
185.29.172.0/22
185.34.232.0/22
195.24.230.0/23
195.88.236.0/23
IPv6:
2a03:72c0::/32
2a04:6040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49229
Signature Algorithm: sha256WithRSAEncryption
09:ce:37:b1:09:66:c6:a0:1f:f6:22:04:44:c6:82:1d:a4:13:
4c:23:12:b2:49:a3:24:8d:eb:95:9a:88:b4:ab:00:30:e4:6a:
bb:99:78:1d:9a:42:36:eb:78:99:4b:b9:fd:2c:47:eb:74:74:
49:41:bf:57:29:47:44:19:89:68:d3:90:38:13:9c:3e:fb:39:
78:fd:1f:5e:bf:01:73:6b:04:32:e9:48:89:9f:9a:1c:70:90:
e7:3f:69:a2:d7:51:8e:50:ed:98:54:18:b4:29:24:e9:9d:b3:
16:76:e3:34:08:b5:6d:b8:44:70:cc:7b:f2:3e:22:d5:0f:68:
32:4d:82:94:9f:83:05:91:85:f6:4b:40:be:6d:ae:61:29:79:
03:94:8b:21:2e:91:bb:43:1f:ba:e0:6f:1e:dd:8b:d6:b0:81:
7e:82:44:2e:7e:15:05:2d:8f:be:18:09:c1:8d:f1:5c:5d:b1:
24:3d:f8:7a:b2:02:98:dd:b5:39:b9:5f:34:72:72:33:d5:d4:
72:2a:34:c4:a6:17:8f:a4:6d:ea:9d:b3:08:10:82:e2:8e:6b:
ff:3f:82:57:41:5b:80:ec:24:74:80:d3:27:64:e0:eb:34:08:
80:05:de:02:99:4d:4c:7f:5c:f8:da:43:51:59:3b:00:f6:72:
f2:99:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:07:23 2024 by rpki-client on console-fra.rpki-client.org