Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
File: b_pZATo68D98lsJOaNleGBoDBag.cer (raw, json)
Hash identifier: a97TTIzjSPdvjtg3ohuCKoQaYDEj2KZe52wP3nm0LvE=
Subject key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4251D12663F2F94B6C2853599A16FC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210222
IP: 193.176.24.0/22
IP: 2a0d:73c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1d:12:66:3f:2f:94:b6:c2:85:35:99:a1:6f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:37:a5:39:ab:34:80:54:24:3a:cc:2c:e9:
8b:c5:82:ba:6e:be:60:5a:d8:2e:57:25:bf:4f:e6:
a8:f1:72:b0:20:8d:33:ad:8e:e9:2f:d3:dd:3e:49:
94:c1:6e:0b:a8:43:35:23:49:41:89:9e:50:e2:e4:
d1:bc:26:3c:2c:86:f0:37:b3:cb:e1:54:fd:12:73:
17:c5:45:f3:bd:db:58:f9:bb:92:b4:d3:71:68:52:
aa:25:99:32:e5:f6:04:d9:3c:80:46:4c:31:97:72:
89:71:6e:97:3b:2f:92:af:03:c9:43:17:c6:2a:2f:
04:9c:38:8a:d1:3b:e1:42:34:75:45:43:02:c0:f1:
05:4c:59:df:9e:76:11:3f:29:83:91:35:b2:e5:14:
12:77:00:dc:9d:09:ec:ce:04:18:2f:35:a1:9c:45:
99:42:97:d2:d8:5f:1b:7e:14:c4:f9:e7:f0:8b:7e:
ce:a5:70:2e:ab:d4:66:f7:86:fb:c3:fb:84:1f:6b:
4f:86:69:15:ae:fa:54:b8:b1:c5:85:9c:ec:1b:58:
75:ac:83:5f:60:ea:d8:00:27:f4:05:8c:9e:e0:cb:
f3:6c:c0:1e:dc:54:a5:b6:82:b0:17:95:15:86:8b:
6a:2a:f5:ac:21:7a:8a:03:8e:f2:36:cb:50:06:36:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.24.0/22
IPv6:
2a0d:73c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210222
Signature Algorithm: sha256WithRSAEncryption
8d:d7:6f:43:f5:8a:27:e6:88:43:77:d5:70:f6:f4:15:bc:e8:
1e:d2:2a:eb:a6:55:03:71:84:05:48:43:32:35:98:34:5c:3a:
8e:75:e2:0a:9a:db:a0:78:5e:f9:e7:63:ae:fb:69:e3:16:b6:
05:ef:1e:a9:84:c4:bf:74:e1:c3:3f:ba:e6:c6:a2:30:90:dd:
ba:a9:6f:65:ac:b3:89:df:fa:86:a8:54:28:29:dc:41:e1:34:
96:73:9b:5a:a9:ae:5b:d3:07:0f:a4:7c:b3:84:2f:df:99:51:
84:5b:ad:b8:a0:b5:11:26:a8:22:95:77:22:eb:57:5c:27:0a:
1a:a4:90:09:e3:79:e4:f8:c6:2e:bf:e5:b2:b3:ee:47:2c:76:
c0:c5:c7:50:bc:70:d4:f7:77:96:b6:63:74:dd:5f:79:de:ee:
cd:4f:03:ba:7e:8f:d3:e1:8d:a5:72:e1:b9:db:db:e4:9b:ba:
7f:25:18:fa:4c:0f:23:be:c1:e9:63:a8:84:54:78:67:a3:0d:
63:34:a5:63:ae:34:61:2a:cc:30:05:4c:6a:c1:b5:1c:73:df:
91:15:fe:78:7e:19:24:4e:1c:39:51:5f:54:43:ea:5e:fb:ed:
b3:93:87:78:35:c6:0f:cf:17:6f:46:bb:f9:79:00:33:bf:a7:
b8:7b:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:54:39 2024 by rpki-client on console-ams.rpki-client.org