Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
File: b56WltzPbBpDIJBAhRSuzcP2Bzk.cer (raw, json)
Hash identifier: ZyMqaBu42TppP6PGy6szTHzo9dBnoSSE95dEBU86QCM=
Subject key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72763149D146E7E59C193BDEA604341
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211797
IP: 185.193.160.0/22
IP: 194.92.0.0/16
IP: 2a0a:3a40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:63:14:9d:14:6e:7e:59:c1:93:bd:ea:60:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:57:25:ea:98:cd:51:d3:23:01:3f:31:fc:
ec:e5:98:5a:0f:fc:5c:8b:50:53:d5:c0:9c:1b:c5:
1f:ff:63:9d:48:90:2d:0e:f3:55:2b:a5:f2:68:b5:
cf:68:be:39:fa:59:ed:28:f3:c3:b6:4e:b9:a7:80:
bc:4a:b3:57:f2:da:e1:c4:27:3a:6e:04:28:07:33:
c4:d1:bd:8a:fd:63:63:7f:24:30:83:b7:ea:61:59:
79:25:35:33:9b:66:dc:fb:c2:61:ed:bd:3d:b8:e7:
66:15:e0:1f:a2:8b:bd:fe:1b:71:0c:70:2b:8a:56:
99:2d:75:d7:38:6f:6d:11:43:a2:7c:4e:ca:f7:54:
85:dd:e7:8f:d8:c3:a5:dd:2a:ca:cf:67:47:53:92:
0d:9f:4f:2f:7f:4d:2a:29:cd:99:f3:fb:e9:18:47:
19:3e:88:e3:87:2d:b0:99:dd:fa:0e:2e:78:dd:1f:
7d:b7:df:b3:ad:f5:e8:0e:3c:ec:76:63:5f:ee:e1:
2e:83:e9:27:93:1e:6b:c5:22:d6:c6:32:d5:8c:3e:
71:ef:96:3b:c3:87:45:16:7d:b4:0e:27:e4:e8:ad:
fd:4f:e9:3a:35:94:6e:32:9d:98:50:35:8a:d0:44:
13:20:6a:56:b5:e0:dc:bf:61:d6:41:34:e7:40:f0:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.160.0/22
194.92.0.0/16
IPv6:
2a0a:3a40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211797
Signature Algorithm: sha256WithRSAEncryption
75:81:76:e9:4a:4e:df:c0:b0:d3:be:34:1c:ef:43:ee:f3:2a:
e7:4f:d8:7b:cc:c5:2d:71:0a:1a:e8:0d:09:2f:cb:62:3f:13:
9b:df:15:21:1f:40:11:30:f1:90:dd:de:89:0a:ae:3f:c9:71:
90:ce:08:03:d1:ab:55:88:73:dd:e3:8f:d9:fb:20:44:2a:5f:
f3:6a:9f:06:10:66:5d:7d:72:42:4c:0a:3e:8a:03:b5:27:be:
10:af:dd:3b:02:9f:51:a5:ee:53:c0:3d:ea:93:b5:ea:6a:77:
60:fa:fa:bc:2a:c2:65:1d:5f:c4:aa:74:c6:15:83:18:b4:cd:
4f:20:ad:90:6f:8a:73:d3:e1:96:0e:48:7b:26:39:db:6d:6c:
ca:2b:0b:7f:ad:65:f7:3d:6f:ac:a1:0a:94:9f:d0:27:4b:a7:
e2:6c:aa:92:d6:6d:b4:04:a3:e7:97:3a:c6:7d:e1:78:3d:b6:
72:27:99:33:ca:6f:00:ba:29:96:9c:72:81:48:80:77:d3:72:
23:f3:e5:bb:63:66:f6:25:93:19:22:3e:77:04:aa:4b:c4:d8:
28:bd:ce:57:57:d8:0a:09:d5:9b:e5:ab:8f:cc:a3:e1:3f:66:
80:01:f4:29:a3:66:d3:ca:1a:a7:6e:b7:a2:f0:95:6f:6e:57:
8b:03:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:10:09 2024 by rpki-client on console-ams.rpki-client.org