Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
File: b027wGlmny5-iCL2OY9rNsRJNFw.cer (raw, json)
Hash identifier: 61Y9r4ge2MdzeaL+bOIH1XWBdEeC+1rikdxjyVxjmQI=
Subject key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA286D2360B595908DB1843895BE4AEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48390
IP: 185.20.3.0/24
IP: 2a0c:d0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:6d:23:60:b5:95:90:8d:b1:84:38:95:be:4a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:fa:2c:66:5e:6c:8c:84:00:1c:e5:12:d5:
f7:88:56:f7:9f:ce:e6:3d:43:6d:9c:3f:49:36:58:
f8:93:cf:35:ce:95:a4:83:e7:8c:16:5e:4d:f6:3a:
5c:ba:5b:05:36:50:88:0c:15:1a:0c:33:4f:ee:e5:
4c:f7:bc:aa:74:f9:85:95:ff:63:f3:d6:44:2b:5f:
48:f1:f3:7e:19:77:5a:d4:45:01:8e:3b:68:b2:31:
5e:cb:f1:37:e5:4e:a8:1e:fc:14:24:21:7c:a3:a1:
87:9e:d8:ac:5d:81:65:8d:5b:f7:c4:8d:cb:ab:31:
eb:ff:db:3c:46:9e:8c:a7:0c:8d:3e:5b:02:c4:a1:
45:f5:c6:62:57:c5:b5:d7:dd:db:a5:39:8c:67:e7:
1d:e6:a7:4a:b2:8e:94:aa:16:46:9a:b7:c2:e4:e2:
31:7f:3d:55:a6:4f:87:6f:bc:97:3c:ce:ca:7b:a1:
4a:02:a3:42:4f:46:e5:17:da:49:17:d1:60:fb:26:
bb:5b:41:d1:01:bf:33:91:18:37:a1:8c:95:9c:ba:
48:75:76:11:0e:11:01:a0:ac:ce:2e:e6:b6:2a:68:
c8:f7:57:af:7a:db:dc:2e:6d:3a:42:37:1e:a2:49:
6e:49:dd:3f:fe:5c:a0:02:1b:17:53:30:b1:3a:38:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.3.0/24
IPv6:
2a0c:d0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48390
Signature Algorithm: sha256WithRSAEncryption
30:8e:47:89:d1:43:48:95:d6:38:f6:19:ea:f6:36:07:ef:ba:
b0:24:e9:96:4c:98:e4:20:54:d7:02:a2:69:06:ab:80:23:0a:
bb:01:23:0c:93:b2:12:d6:a7:7b:c7:00:a5:14:71:7a:e7:15:
23:6c:87:89:65:f7:f7:cd:92:8d:5c:f5:33:2d:eb:99:55:b1:
22:e9:1f:58:d5:83:11:3c:26:cd:28:cb:ab:bd:2c:59:28:76:
96:3e:e6:56:57:97:87:93:10:c5:01:2f:aa:ae:1e:51:14:ee:
e0:da:73:21:6c:d4:d8:25:54:c8:31:37:25:8e:be:38:83:d6:
d5:da:6d:b6:b7:de:1c:8f:88:26:b6:86:3f:c1:92:f4:ba:de:
00:48:c5:43:2e:22:17:a6:4c:60:5e:8f:59:02:a7:ec:40:03:
93:db:a9:a5:25:43:21:f5:fe:d3:95:a2:04:08:de:ec:81:d6:
cb:6c:37:66:57:ec:1b:3a:60:ab:70:15:56:f5:44:0b:30:53:
62:94:df:a7:14:eb:6b:08:cd:b3:d5:1f:f8:b3:8c:59:86:ab:
f3:4c:1e:84:94:0d:e3:5a:19:00:67:84:b8:21:bc:5e:c4:a5:
1c:f7:e2:d1:a2:cb:ca:cf:03:56:5f:98:94:79:a5:62:68:79:
6b:fa:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:28:27 2024 by rpki-client on console-fra.rpki-client.org