Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
File: ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer (raw, json)
Hash identifier: eXFTOio4b2Ef3/03oWbbGap+o3Vad2RMs0G2CruWRS0=
Subject key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72588241C50002C58C5EBDEE645B4D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47568
IP: 94.100.32.0/23
IP: 94.100.36.0/23
IP: 185.122.24.0/22
IP: 2a0d:c280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:88:24:1c:50:00:2c:58:c5:eb:de:e6:45:b4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:43:85:d4:d6:ff:56:be:f3:8f:5b:92:b0:
26:de:0f:9d:5e:4c:03:4f:58:9f:52:73:11:b1:32:
62:11:60:7c:b0:20:f6:ad:51:3f:b0:09:47:53:73:
26:71:8f:36:36:d1:3f:14:87:bf:f2:0d:79:ca:67:
52:32:40:c0:ed:a8:96:58:d9:22:19:ab:5a:f4:c7:
df:08:ee:52:ae:fa:f2:7d:de:a9:3a:ef:95:c2:a4:
2c:3b:42:95:0f:bb:c5:77:21:63:4a:16:46:ff:e4:
b1:20:d1:4c:27:6c:c0:ce:b9:f1:cf:95:93:63:42:
4c:63:64:08:ec:24:0a:9e:43:f6:b6:7d:1f:99:4d:
9c:76:32:4d:4c:0d:bb:c6:63:64:97:ca:1d:10:a2:
c6:30:1e:0e:bd:b7:71:6c:b5:50:f7:ff:c3:6f:46:
24:07:a7:2d:7a:4c:b3:af:44:65:f2:a6:5d:49:88:
14:cf:c5:df:a0:ac:06:03:d7:7c:6a:90:9d:f2:cd:
62:d5:2f:80:a1:c5:0b:5b:8c:0b:20:9b:54:c6:4a:
67:d0:6d:67:81:e5:25:77:77:01:dd:c6:42:14:fc:
a0:83:36:9d:4b:ef:d1:1f:48:04:54:36:84:cd:20:
62:40:70:64:a0:28:fa:c0:f7:12:1f:dc:df:26:6e:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.32.0/23
94.100.36.0/23
185.122.24.0/22
IPv6:
2a0d:c280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47568
Signature Algorithm: sha256WithRSAEncryption
25:65:2a:f6:5b:ec:c3:bb:fa:05:ea:02:35:d1:45:78:cc:ef:
9d:da:b4:c7:bd:0c:60:e8:02:bc:2b:bc:89:71:34:e2:df:0d:
23:ff:07:6c:8e:1b:d5:ec:5c:67:0b:c5:e3:e5:29:c6:35:bf:
b0:1f:8c:b0:ba:c1:8b:85:ba:77:c2:eb:07:3e:aa:ca:c2:b5:
31:f5:bd:06:9c:41:30:ff:48:34:3d:de:e1:44:ae:ba:f4:70:
c8:c7:fe:13:f1:a6:cd:89:66:b0:d1:85:9b:72:5b:e2:10:27:
75:16:77:81:c6:d8:d2:b6:28:f6:88:72:01:96:f7:50:9b:3f:
d6:ac:5c:49:b6:1f:6c:e2:9f:48:a5:07:47:9a:49:d5:08:28:
b6:3c:fe:1c:d5:db:9b:6c:cb:74:e1:68:d7:8e:44:d8:f2:ce:
1c:19:c6:01:10:41:c3:b6:69:41:13:28:03:d9:6c:9d:fc:f9:
8f:03:14:3b:4f:4f:94:67:a3:37:2d:c4:88:a0:59:3d:3f:5d:
aa:4a:ca:ce:60:27:c5:1f:74:e5:a0:dc:3a:9e:c1:d9:17:33:
cc:14:d8:ef:29:31:b6:b0:ab:b1:d2:8d:ee:8c:11:63:78:15:
b9:19:30:e7:16:0f:95:9d:d4:8f:6a:c6:8b:32:37:aa:23:9c:
f0:4c:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:39:15 2024 by rpki-client on console-fra.rpki-client.org