Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
File: cTm2kHj5bKuvcYo5u1hniurBzMI.cer (raw, json)
Hash identifier: 6+uOmbhoHPxvwknBObMu83IWYtYUjPyH2ttFEmARoes=
Subject key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B7152DB28EAEFE738A32EECDBF8A6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42871
AS: 197999
IP: 31.217.216.0/21
IP: 193.33.216.0/23
IP: 2a03:1a80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:15:2d:b2:8e:ae:fe:73:8a:32:ee:cd:bf:8a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:17:cd:ee:41:4c:c2:b3:39:dc:ca:66:71:
40:10:8a:ac:99:e3:57:01:34:08:a8:d2:1e:22:fd:
9f:83:3f:02:7d:33:41:c5:a3:19:3c:ed:45:a9:44:
20:e4:e4:61:5f:ee:b3:7e:a0:32:24:3a:e3:d2:11:
42:a2:72:df:0f:62:94:eb:01:36:3d:3a:95:b6:df:
fd:d5:f0:eb:01:dc:4a:a8:a0:9a:8c:46:81:81:2e:
33:51:cf:00:4b:f7:de:09:e9:11:f9:0a:38:ba:93:
13:94:b4:6b:ae:9b:c2:05:5f:c8:e0:6f:08:61:1f:
d9:f6:48:d9:47:08:47:86:22:b0:09:a2:71:86:f5:
e1:f4:ee:33:74:71:63:d9:43:21:2b:5a:34:17:91:
83:86:fe:de:d0:98:63:a9:e1:0e:50:45:4c:21:c9:
77:b0:f1:b3:68:7e:46:db:6c:5d:5a:34:24:ee:be:
33:2b:89:38:dc:58:16:da:a1:e8:75:ef:81:34:e4:
2e:f4:cb:40:f2:2a:02:11:f5:38:7c:a5:de:b4:c6:
84:2e:ce:c7:2b:ca:23:a5:94:33:24:55:db:84:22:
c5:f5:dc:f1:79:2b:12:a5:57:bf:cd:32:b9:49:6d:
d9:e1:da:5d:29:67:9a:88:28:97:63:f1:a1:9d:40:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.216.0/21
193.33.216.0/23
IPv6:
2a03:1a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42871
197999
Signature Algorithm: sha256WithRSAEncryption
85:46:57:b7:16:70:55:cd:98:bd:cd:16:f7:db:87:7e:89:85:
91:93:f7:75:03:5b:b5:f8:c9:91:00:e0:1f:59:68:3b:d0:f7:
66:ad:a2:3f:37:40:84:3a:2e:67:de:f4:55:f0:21:7b:3a:fc:
ce:36:ce:50:84:b1:8f:f8:02:64:e1:27:2b:46:fa:88:5e:3d:
d8:d6:32:76:b1:b0:d0:3c:07:12:6c:df:5d:da:b8:27:65:29:
f7:73:cc:fe:2f:47:ca:ae:b7:b5:12:f5:b8:eb:5a:dd:25:e6:
7d:39:01:75:06:4f:c5:15:94:42:99:f7:82:c5:f2:e2:8a:9f:
6a:56:2e:70:45:53:3b:10:d4:a0:35:0e:d4:3d:a8:25:40:76:
75:06:49:f5:8e:d0:78:b3:cc:72:d1:d0:8c:37:82:b2:f0:23:
99:df:61:3c:d7:be:40:52:0e:01:7a:fa:36:1a:6e:1d:3e:a6:
b3:01:98:b8:6c:b1:a1:1e:e5:d7:d8:b2:15:3d:c0:4a:92:36:
7f:dd:b9:60:dc:30:02:7c:65:e1:c3:fd:c2:fc:a9:a5:5a:ac:
ee:c1:e3:fc:bf:d9:19:59:17:8e:0d:65:59:51:be:95:c3:c9:
0f:da:ea:1f:0e:30:61:26:11:15:29:5f:ae:bc:0e:19:06:4d:
fd:7f:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:35:37 2024 by rpki-client on console-fra.rpki-client.org