Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
File: _utSjKSLH0R1gsVMz27XgHUbUdU.cer (raw, json)
Hash identifier: sf7luES/oaBpsfFYOPHH3jhc9hoERL8cmdzDJG+aqrc=
Subject key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D125618AD44E9B5C0C16781D71E359D2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jan 2024 12:54:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215708
IP: 95.128.194.0/24
IP: 2a14:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:56:18:ad:44:e9:b5:c0:c1:67:81:d7:1e:35:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 16 12:54:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:c0:90:85:4a:a4:55:87:de:6d:0e:aa:83:
18:9d:2f:e5:64:d3:8f:eb:d7:50:5d:30:8b:f4:39:
0a:34:97:b1:bd:31:99:36:af:93:80:4e:6d:06:49:
41:32:48:c7:9e:9f:1d:88:87:8c:2a:8b:cb:60:c4:
50:27:1f:6a:1c:b8:df:40:bb:ec:79:ff:f9:5a:96:
0d:57:be:3d:4e:26:0b:59:8d:5b:44:a9:02:c3:28:
b8:f6:3e:0c:11:60:2a:88:e3:e1:b6:f4:5a:81:33:
fb:2d:c8:82:ce:fa:88:d1:72:4b:86:58:ec:46:5c:
6d:a4:00:3d:73:29:f1:34:00:cc:f0:92:c4:0e:d9:
5e:ec:df:1d:ee:ad:32:fb:00:a2:47:9f:d6:f5:ea:
38:fb:4b:8d:21:74:c4:ae:41:aa:04:e0:68:54:c0:
e1:a8:c6:17:1c:5f:91:ec:73:33:65:c0:8f:23:8c:
a3:98:2d:4c:73:60:33:e6:46:d4:bc:7a:65:3d:16:
7d:9c:6a:86:18:54:20:a4:56:84:2a:92:44:91:44:
c6:27:aa:cf:31:c3:8e:fd:08:c3:3a:15:06:72:79:
5c:68:dd:59:5e:3b:e5:a2:dc:a8:fc:fa:6f:8e:b6:
05:81:2f:46:e3:2c:d7:60:52:d5:17:e6:ad:ca:bc:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.194.0/24
IPv6:
2a14:7f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215708
Signature Algorithm: sha256WithRSAEncryption
41:85:6a:d1:c3:bb:78:af:88:e6:d1:51:5d:e6:ca:f3:81:2c:
5f:35:56:9c:de:e4:fd:87:f2:47:02:86:58:85:74:ba:05:1f:
29:1d:24:87:d3:38:0c:25:e0:ad:30:fb:73:32:96:a0:77:2d:
d8:88:cc:5d:a7:bc:a0:82:b8:02:ef:3f:af:98:74:fd:3f:5c:
6c:1a:ed:0d:b0:c6:ff:81:83:47:94:b1:a0:07:79:b8:2c:7b:
00:69:1e:81:ed:df:c3:7a:64:1a:e3:60:b7:2f:c0:a1:1e:57:
35:c5:7c:b5:27:90:a1:7f:60:ee:c8:21:2f:cc:03:9a:cd:94:
c5:e6:45:28:e4:9f:23:32:c0:25:1a:85:85:e1:3f:93:73:a8:
b1:7d:f8:e7:7a:98:46:eb:0f:1d:60:7b:17:4a:d3:60:e4:b4:
24:32:12:7b:0b:8e:f0:a7:e4:3a:d3:8b:c5:38:0e:f9:1d:ef:
ec:74:85:72:f1:99:ff:48:67:c7:29:b8:bc:98:60:b8:cc:ae:
33:5c:92:fd:9b:c7:20:1e:cd:60:18:fb:ff:43:3b:39:54:91:
7b:95:ae:d6:81:57:75:2e:99:df:ec:a2:a1:61:8a:b4:74:f1:
44:5a:58:59:43:57:62:ee:da:72:ac:19:f6:06:59:84:e0:5e:
38:5e:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:12:37 2024 by rpki-client on console-ams.rpki-client.org