Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.cer (raw, json)
Hash identifier: +bBjKCX2S/ywnuIYFIjVBk4bhrPR4KvkqFnfJUeMg0o=
Subject key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A6C6ECD0895160EE55795C58FC29A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211450
IP: 193.36.90.0/24
IP: 2a10:e340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:6c:6e:cd:08:95:16:0e:e5:57:95:c5:8f:c2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:50:2a:46:fd:70:ea:10:60:8c:0f:1f:a2:
59:f7:7d:ec:5a:95:e0:67:1c:7a:1c:a2:5f:03:46:
7b:26:11:69:d5:a0:af:c5:8b:9c:a2:d5:c5:8e:98:
d7:0f:00:f2:41:80:60:df:6a:af:11:f4:9d:6d:22:
49:6b:b3:d9:00:25:86:54:bc:42:c9:23:bc:b9:d6:
38:10:c1:1a:56:5d:4f:14:cd:61:65:af:e9:c6:d9:
64:47:0d:ec:28:c1:0b:42:40:b4:91:61:b2:f4:9b:
59:2a:e3:65:33:76:0c:b1:bc:1d:9b:66:86:64:a4:
ce:e1:ac:73:3c:4c:cb:f6:9c:a4:75:65:62:d6:e5:
a7:d5:52:31:ae:51:ac:ec:db:18:ec:55:30:3e:ee:
85:c8:ff:4a:75:06:40:9e:86:0b:d2:79:f9:81:5e:
cf:f9:fd:61:06:f7:46:b6:19:c0:eb:2e:97:3d:e7:
69:16:d7:5e:6b:f8:42:02:87:f9:de:d9:97:1f:44:
f4:90:46:94:f2:c5:b3:85:25:0b:19:7b:09:fa:be:
79:11:94:28:b0:b3:70:23:30:f0:42:02:34:f7:4c:
a2:37:ec:7c:74:b3:bb:84:5c:2a:97:e9:83:a1:3d:
d1:f9:71:4b:6d:ae:03:69:91:fb:e7:94:5e:bb:66:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.90.0/24
IPv6:
2a10:e340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211450
Signature Algorithm: sha256WithRSAEncryption
ac:90:ff:2f:14:62:1f:4e:61:91:1d:6c:e2:a2:a8:d2:aa:20:
f6:11:dc:04:fc:b8:91:8f:22:41:c4:ca:f1:e5:a8:5c:9c:4f:
5b:87:a0:14:a3:70:bf:ab:50:bd:3f:b4:34:4a:48:e8:59:4d:
03:43:d4:4d:ac:97:31:fd:c9:a2:5d:0b:31:1f:50:53:a9:fe:
1c:7c:60:20:20:43:c9:b0:0b:f9:05:84:64:6a:ed:75:21:ff:
8f:8e:81:27:93:e1:37:59:64:27:4b:1d:b8:24:e4:18:7c:32:
3e:49:1d:1c:3b:2c:a1:00:c7:62:2e:05:20:bb:8d:52:54:b4:
3c:81:57:4d:42:96:b7:08:84:53:42:8e:ae:c4:d8:ef:47:5b:
c3:f5:75:ef:2e:f4:15:c2:bb:ab:1c:d2:bf:70:34:a3:9f:32:
ce:68:56:91:c2:97:0d:94:e9:57:ea:e4:1b:f5:0e:5b:0c:4c:
39:f9:6c:77:e6:f8:9d:6a:5a:82:17:bb:86:60:50:1a:1a:f9:
4c:bf:bf:a4:53:22:8c:7b:1e:18:bb:de:b7:a6:c0:a3:7e:6b:
a3:d8:ed:a5:09:21:ea:79:55:b0:c5:cf:c4:5f:08:6c:06:f3:
e4:2f:c8:8f:de:93:d7:3f:8a:db:49:b5:54:dd:82:ed:2a:2b:
1f:8b:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:37:41 2024 by rpki-client on console-fra.rpki-client.org