Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
File: daWp6O8n4wJyk--E-4-NMPq25tY.cer (raw, json)
Hash identifier: It+nfsfjrIkOj1XwAxAse0LCqT8Z5f6Ej/VpuTDcYEY=
Subject key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3496152765AB0A30C3A8244D3C050B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 64426
IP: 109.206.232.0/22
IP: 2a0d:c4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:61:52:76:5a:b0:a3:0c:3a:82:44:d3:c0:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:41:8d:17:ea:e0:83:31:0a:4b:07:9c:81:
44:59:d2:3b:59:31:32:e9:11:e1:f3:4c:48:d3:63:
8e:cc:f9:6f:ec:d3:cd:d3:77:28:f3:53:c3:2a:30:
ae:f2:12:13:2e:1f:ae:e3:ed:25:53:34:1f:29:92:
0f:09:c8:83:92:3a:2d:ca:55:cb:ac:b8:52:d4:ce:
63:5c:cb:ec:1f:c0:b0:eb:b9:50:c0:d3:fe:0e:85:
15:d2:64:c4:27:52:d2:58:a5:7c:59:62:ef:44:7f:
5d:44:c9:e8:01:99:07:80:f7:a4:2f:14:fc:b8:0b:
9b:a5:3b:c1:70:1a:5c:8d:40:cd:ee:2a:14:f0:92:
cd:1b:a1:e9:73:22:64:b9:61:ac:f1:d6:0e:b9:76:
39:73:ec:e1:a0:4c:44:50:d4:ff:3c:c5:0a:a9:dc:
f3:c3:fc:54:97:34:b6:14:c8:be:77:e5:15:6e:88:
ec:8d:77:56:5b:68:27:20:b3:9d:bb:32:12:dd:d5:
04:19:82:97:79:0f:93:a7:e4:1b:23:14:ad:5e:17:
b5:cf:e2:ad:62:f0:8e:61:be:8e:c6:37:e2:36:0a:
c4:37:f8:4f:30:80:df:ad:40:f3:9b:68:a2:39:08:
d9:b4:ef:01:8f:15:e1:1a:a9:39:7a:88:65:1b:a7:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.232.0/22
IPv6:
2a0d:c4c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64426
Signature Algorithm: sha256WithRSAEncryption
5a:b9:30:29:0f:ba:af:22:46:0c:0f:82:5b:5a:4d:e1:3f:83:
61:d4:1d:c0:44:2d:f2:6d:21:f3:5b:fd:5b:c1:73:51:c4:f1:
49:1e:4f:13:89:1b:a2:ab:f2:af:9f:a2:62:20:ce:26:bf:bf:
8d:4f:7c:45:12:79:f6:ce:74:8f:f0:ae:04:c8:42:e3:05:a3:
d9:37:50:e5:c6:17:6a:17:23:33:bf:44:a7:6c:ab:17:34:b8:
27:05:fa:c3:c8:3c:58:d1:f7:12:00:8e:3e:2c:5d:5d:6f:77:
6f:9b:d2:0a:07:e9:a9:a1:f1:6d:13:af:6a:1f:7f:58:f8:0e:
16:ab:02:19:20:76:45:1f:8c:76:d9:08:7b:8c:31:31:39:a4:
1f:4d:b7:91:68:36:d8:63:b6:f9:00:5d:e7:cc:2f:bf:bc:79:
9c:5c:0e:ea:5e:66:cb:9e:08:4b:6d:99:61:18:32:5a:db:3d:
4c:d7:dd:ce:d8:de:b5:f2:66:7f:2d:67:21:b7:ec:b2:63:ff:
2f:69:12:52:65:f7:1f:3b:7c:d8:fc:c6:e7:f2:02:68:1e:3a:
79:2b:f9:34:ac:f5:ce:c9:12:da:6e:38:ff:16:f0:71:bc:b5:
0d:fc:10:cc:77:7d:47:62:fb:3c:45:80:3e:ed:8f:4e:f6:31:
85:c0:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:02:00 2024 by rpki-client on console-ams.rpki-client.org