Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.cer (raw, json)
Hash identifier: UWGqpiW17obygRQl2QfCjv/i747CAZsfeem08DKG498=
Subject key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7F5E80F385C74E784185F736EE6AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.34.200.0/22
IP: 2a0c:bb40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f5:e8:0f:38:5c:74:e7:84:18:5f:73:6e:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:cb:c7:d3:5d:13:99:3a:b9:f6:fd:5e:18:
2e:a2:64:c0:c5:da:b8:dc:6d:54:be:a4:43:48:86:
cc:c0:c7:98:4e:37:82:0b:fe:c4:1b:0c:90:ce:d0:
07:6e:ee:f1:59:b2:fc:7a:fb:8f:71:dd:40:06:10:
40:88:6f:79:4d:20:31:23:b2:a1:08:eb:2d:f5:0a:
a7:0b:e8:9d:ad:74:d6:0c:30:35:1d:4c:40:e6:17:
46:b9:98:fc:05:70:77:07:e6:fb:7c:90:61:a4:61:
d2:42:59:c2:bc:b9:31:a2:1d:31:d2:88:72:77:07:
f9:16:c1:99:8b:0e:98:42:c4:4c:82:aa:15:37:a4:
54:62:9d:7b:29:36:58:f8:16:e0:08:b9:85:a1:37:
49:61:d5:49:3a:5c:4c:8a:a6:d6:2a:9f:be:6f:ad:
de:65:6e:07:3d:89:26:ef:d3:e6:8f:c4:64:3b:7d:
17:27:a2:0d:c6:c9:31:e6:41:3e:98:18:66:ca:ab:
68:b3:20:be:83:6f:0c:db:e5:fa:02:85:1a:40:f1:
10:fa:6e:f5:85:2d:34:57:5d:94:d4:fa:13:10:67:
b6:9e:79:6d:e7:c7:04:c9:03:3a:82:05:79:7f:55:
2b:35:59:b8:1e:d7:5a:89:8a:43:34:5a:9e:57:99:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.200.0/22
IPv6:
2a0c:bb40::/29
Signature Algorithm: sha256WithRSAEncryption
20:bd:f7:69:bd:2e:c6:af:bc:a2:51:ee:29:06:07:7c:6a:72:
05:e9:8a:ef:1e:1f:40:4d:9a:e6:11:0b:b0:a1:b2:10:b1:f0:
26:c3:14:ca:e4:0f:66:3c:51:0c:39:e6:6c:15:cf:03:54:1a:
8a:b1:17:ae:65:a4:29:a9:fd:c6:98:10:a9:e9:90:e5:25:1d:
e1:50:03:01:32:be:b9:ba:61:f4:d6:1a:67:8e:4a:96:c2:66:
e3:11:69:6a:e5:72:45:73:54:2b:a8:05:0d:d3:50:dd:60:a3:
95:28:d9:9f:8b:56:07:db:c6:f2:cd:a7:e7:14:a2:de:b3:80:
58:e4:ea:b1:0e:0e:26:7f:b3:48:25:62:ba:b6:30:e7:29:68:
a9:a8:4c:32:55:06:8c:b4:14:c5:7c:26:7f:a6:05:93:a4:c9:
4f:b8:bc:74:de:68:51:da:aa:4d:0c:e6:88:9e:8a:42:d4:63:
54:e9:f3:24:e8:c9:b6:94:e5:6f:fc:6e:c5:fd:e3:12:8a:7c:
cd:cd:dd:6f:4e:e3:de:3d:0e:ee:af:27:97:36:1e:bc:96:e0:
ec:23:8f:70:94:2d:06:b1:64:93:50:9a:bf:1e:20:dd:4d:61:
6c:22:f6:fa:97:9b:20:42:50:9c:a6:58:02:57:ff:fa:9d:01:
db:11:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:40:13 2024 by rpki-client on console-ams.rpki-client.org