Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
File: cDE3TrlnkQnpGjjiixe_Jgq506s.cer (raw, json)
Hash identifier: k6GEBGqvpx49Gqe3VptF4xekhpVtJXohMT98yGrp5so=
Subject key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01919E90D267C0D08CC9B90C2B42237BAC85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Aug 2024 14:36:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214286
IP: 185.223.136.0/22
IP: 2a14:43c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:90:d2:67:c0:d0:8c:c9:b9:0c:2b:42:23:7b:ac:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 29 14:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:0a:13:2a:a2:30:21:18:49:0f:45:f0:58:
6e:1e:e0:99:c3:ae:45:4e:ab:86:57:38:13:cf:9c:
5f:60:19:5a:22:9f:da:4e:43:41:15:1d:07:10:3d:
c2:ac:f1:f9:d2:b9:e2:85:7e:35:fe:8d:79:28:23:
2f:76:c6:c8:e9:e3:37:b5:4c:97:69:f8:87:ed:70:
4f:7c:c3:02:94:15:6d:42:92:73:03:2a:b0:06:93:
22:31:8c:d0:aa:2a:0c:07:e0:11:52:4b:33:06:ad:
62:ce:0d:dd:3b:68:36:2e:ef:b5:7b:b4:ed:21:74:
0f:dd:cc:5d:de:69:67:a2:2d:c2:1d:f1:75:8a:9e:
26:22:2a:a3:94:b4:3f:dd:25:07:12:e3:2b:4d:c0:
3b:72:c6:c9:aa:e1:42:4c:1b:2e:dc:2f:ef:ab:ea:
d6:89:c3:5c:96:8c:fc:20:ed:ed:48:a6:55:8d:fa:
2b:be:ed:aa:f4:c5:47:fe:75:39:69:f5:61:5e:43:
2d:39:16:53:7b:d4:73:f3:7a:bd:1b:69:4f:12:14:
de:c0:fa:7d:4a:78:db:f3:9c:e0:9b:05:e2:24:38:
cf:5f:8f:48:2c:97:9f:49:df:13:2b:e4:e1:f1:30:
8a:e1:bb:87:8b:e0:49:0c:91:7e:ff:fd:22:21:9e:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.136.0/22
IPv6:
2a14:43c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214286
Signature Algorithm: sha256WithRSAEncryption
44:54:6f:4d:f4:03:bf:48:84:7f:34:3f:e8:4c:1d:51:e4:78:
15:f1:85:de:a0:70:fb:5b:04:a3:20:55:15:82:c6:99:ca:a2:
8c:01:3c:c0:e5:f8:1c:aa:9d:95:bd:fb:ae:cb:23:8a:60:14:
d7:6f:5a:a9:8b:4b:fb:ec:2d:e0:14:7a:95:25:0a:50:dd:51:
7c:98:28:b2:35:84:9e:7f:ec:38:c9:ed:f5:18:fc:58:3d:4d:
b8:42:5b:1f:18:41:93:e5:c4:4c:2a:e6:e9:40:7f:66:5e:2e:
93:8a:b1:6c:4c:61:c0:13:2a:ed:71:cf:c5:08:2a:a6:f2:bc:
0a:d6:f1:86:85:aa:3e:4a:df:9e:47:04:54:38:fd:ac:47:c7:
03:26:b2:89:4a:8a:71:a3:f5:08:e4:e2:31:2b:35:f3:15:01:
20:f8:d4:10:a5:e7:3b:04:83:8b:40:e6:32:df:9c:c1:1f:c4:
49:83:2e:60:b7:2b:06:c1:c2:fd:d5:13:a7:c8:04:f5:9e:a7:
1e:72:05:a7:e8:ce:16:4d:7b:63:33:4d:77:0b:cb:ed:55:0b:
b3:28:09:57:80:0a:27:f6:fe:37:4e:2c:10:bf:0e:b4:d7:2f:
77:44:4c:31:02:fa:84:a1:26:2c:46:7c:2a:4a:85:95:6f:9d:
6f:32:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:07 2024 by rpki-client on console-ams.rpki-client.org