Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
File: afAHCvh31rmGswe5vATvGcRAQz0.cer (raw, json)
Hash identifier: 5a6zkwn7I3JGnrTdRWgLKwkSl0zZGT0U/QycZcMrydU=
Subject key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500418DE460D7E396DF61556991D3E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.127.208.0/22
IP: 2a06:cbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:41:8d:e4:60:d7:e3:96:df:61:55:69:91:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:ca:88:e5:0a:fd:35:3c:6d:59:81:50:fd:
f0:32:38:bb:c7:48:87:57:48:6e:36:9d:08:e0:8a:
ba:df:d3:d3:da:46:95:45:5c:45:f6:69:19:f7:5b:
b1:cf:34:6c:46:3b:fa:1c:73:ce:05:a0:26:94:df:
b1:e2:cd:00:c9:40:e8:15:30:19:a4:14:28:3e:f1:
4a:78:e0:6d:35:dc:7c:bc:a3:06:5b:6f:88:b6:29:
21:04:4e:d9:1a:ff:e9:f6:3a:4f:da:03:4d:67:2b:
89:1a:d4:c8:1b:b8:39:64:77:7e:7a:e4:28:58:b7:
9d:0d:1c:d9:cf:5a:f4:8c:ec:d3:77:6b:c6:75:83:
ef:4e:21:31:5b:59:37:63:d0:4e:fa:3c:23:63:1d:
e3:74:63:71:e2:e9:07:66:69:58:34:de:bc:f6:8f:
ba:78:22:a0:3d:67:1b:5f:bd:67:fc:b7:5f:63:9d:
59:06:53:d9:f6:60:7f:59:8a:7d:35:28:ab:3a:a8:
ac:d0:e7:78:d4:3e:77:58:c1:f1:a2:fb:23:a4:bf:
37:85:97:31:24:ce:2b:15:7e:1b:a2:97:9a:77:70:
e8:ec:41:7d:fe:df:85:3d:1e:66:24:f0:bf:20:e6:
d2:76:be:4f:db:9f:1e:ec:51:a4:d7:c7:da:ec:3d:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.208.0/22
IPv6:
2a06:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:e0:d5:2f:8a:f3:24:d2:a6:79:d3:12:08:81:b6:da:9b:9f:
a0:89:1e:12:4a:c5:9c:01:a0:a1:b6:81:2e:e7:2c:55:b1:59:
08:1d:f9:6d:7a:c1:0b:56:5e:e1:5b:5d:d9:50:69:71:b5:73:
f9:a2:e9:2c:46:b2:a1:a9:9e:87:5d:10:58:c6:f3:37:c3:1d:
05:10:97:43:14:72:f1:e5:49:97:60:2a:4e:a8:73:cd:5f:6e:
c9:40:ed:b7:aa:6d:99:7d:79:81:c5:40:8e:16:c6:f6:a7:06:
f3:1b:ac:03:3c:97:ba:31:a1:52:79:1a:bf:d9:4f:73:56:40:
3c:aa:df:3d:64:42:b8:53:b2:e8:42:63:76:c9:34:a7:0d:00:
ad:4e:db:3d:84:f0:b2:4c:17:1b:2c:a4:72:66:5b:f7:06:48:
74:17:e7:1e:7a:bf:4c:46:d9:7c:35:0f:ef:2a:67:d8:5e:dc:
73:79:0c:99:f8:f2:7d:ed:6f:67:3c:8e:b5:4c:1b:e6:21:ee:
97:cd:56:f3:a4:4c:6a:41:a7:80:e0:16:a3:09:b6:34:90:b2:
24:75:a3:be:7e:f7:2b:e6:4d:a2:2b:12:23:86:75:10:fd:7e:
ec:2d:9a:41:9f:2b:a1:10:0c:3c:bc:b9:42:b6:8f:54:81:45:
92:1a:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:52:28 2024 by rpki-client on console-ams.rpki-client.org