Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
File: akYj92vVuy3wr2bzYP90_xwA2wI.cer (raw, json)
Hash identifier: Mpgjug2ca0XDXdYhHcRbkR+9jhHQ8NtF8/IoN13CfqE=
Subject key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC2B328A19A11AA7ACACF6B35C5755
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60342
AS: 199246
AS: 206038
IP: 185.4.132.0/22
IP: 185.138.40.0/22
IP: 2a02:c500::/29
IP: 2a07:8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2b:32:8a:19:a1:1a:a7:ac:ac:f6:b3:5c:57:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:b5:ce:02:35:c9:d4:4d:6f:6b:b8:e3:9f:
f8:c5:63:24:5c:bf:9d:51:06:96:24:83:19:48:d2:
80:f5:64:7b:7d:67:b6:eb:ad:c3:ed:99:ad:27:26:
d3:8c:97:16:fc:ac:16:1d:82:98:c8:2e:67:6a:77:
57:99:6c:19:c5:13:db:25:ce:e7:b3:75:6f:d6:4a:
a1:04:7e:0e:04:5a:15:42:9f:aa:71:7d:74:0f:93:
32:55:dc:92:d3:82:fd:3f:ba:ba:81:76:f4:a5:6e:
cf:82:09:2f:22:43:6b:c8:f0:90:07:c1:35:be:09:
31:3e:71:d3:40:93:f1:5c:ad:c6:90:5f:5d:fe:d6:
b1:8e:f9:3e:96:e4:9f:a8:4e:e0:84:79:ff:75:8c:
56:71:1c:fe:f5:7f:11:dc:33:4e:67:dd:0b:be:bb:
62:e4:2c:9a:9e:b6:88:af:b8:73:7b:1d:8a:dc:8a:
68:32:4d:78:ad:90:20:60:cf:b4:1d:13:65:cc:dc:
f7:1c:67:96:4f:f5:d2:64:fe:ca:b7:4e:5e:67:b2:
43:a1:0c:da:91:c7:81:4f:f4:f7:9d:b9:58:c8:9d:
7d:4e:e5:db:59:bd:ce:ab:66:e1:f3:8e:06:28:f2:
82:6c:54:4c:fb:c6:1d:5b:3c:a0:72:98:c6:6d:03:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.132.0/22
185.138.40.0/22
IPv6:
2a02:c500::/29
2a07:8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60342
199246
206038
Signature Algorithm: sha256WithRSAEncryption
27:ca:68:61:70:70:21:a6:ec:24:a1:80:79:4a:17:d8:ac:0c:
6f:0d:03:45:a4:b0:72:93:97:88:6f:59:81:c2:c3:81:41:53:
eb:bd:d3:0a:51:c5:85:dd:02:66:07:20:bd:ca:3d:1b:c1:0a:
f4:46:f8:9b:07:13:95:83:ae:b8:5c:8d:43:ba:3c:23:9a:9f:
de:50:0e:f3:28:79:f2:9c:4d:f0:70:1b:cc:07:30:89:7d:b6:
a8:31:37:c9:ca:42:0d:33:2b:ab:10:54:a6:28:6d:24:59:c5:
dd:4a:9b:6d:97:0d:c1:15:6d:a0:45:cf:cb:16:84:55:45:00:
04:4c:62:4a:ea:d9:6c:1e:5b:f3:b7:aa:c4:7a:1a:69:51:3e:
03:c3:4a:ce:dd:12:87:e0:28:bc:bd:4d:fc:85:68:8a:ab:32:
d2:6a:84:7e:cc:54:cc:fd:89:98:9f:d8:66:f7:30:76:e3:ab:
f7:45:f1:6e:aa:93:37:1c:f9:9f:ec:de:f4:28:ea:e1:20:86:
62:10:00:21:86:5f:ec:e7:dc:5b:24:80:1a:c3:9d:37:4d:4c:
77:fe:ea:8b:cc:ee:93:de:3d:77:4b:5a:00:e9:34:e5:69:3c:
33:5f:2d:42:3d:6c:fd:34:3b:89:00:05:2a:2d:41:1c:dd:94:
6f:4d:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:11:51 2024 by rpki-client on console-fra.rpki-client.org