Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
File: dahWeFOS2ifQC9snCRxZJsMVXYk.cer (raw, json)
Hash identifier: m2Fdk/Sm8w9FblEKiLhrAgs9uGMJyF2YotNHwaBEKUE=
Subject key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794F584E6125627A43486F8663975A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205802
IP: 185.199.204.0/22
IP: 2a0b:8840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f5:84:e6:12:56:27:a4:34:86:f8:66:39:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75a856785392da27d00bdb27091c5926c3155d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:16:b2:02:be:e4:b7:cf:cf:ed:dc:3f:04:
8b:25:6d:2c:bd:ed:00:35:9a:54:d7:51:ff:ed:3b:
a8:9c:b3:be:83:01:d2:a7:9b:91:da:48:20:db:9e:
bc:d2:38:b5:87:cb:f0:40:d1:33:f3:06:fb:f6:0a:
96:fc:cb:ce:30:19:64:de:69:73:db:18:96:db:66:
4e:a2:84:0f:49:ee:29:13:9c:1b:2c:e1:5e:cb:cf:
2c:49:c3:50:62:33:ec:83:ff:50:f1:9b:a3:76:36:
a5:03:a4:d5:02:6f:48:c8:b5:36:f4:50:14:43:93:
2e:a7:39:3a:f4:8f:03:4b:c6:c4:bc:8d:00:0a:f1:
a2:6d:d9:9a:57:87:77:3c:5c:f4:f6:0b:0e:32:a2:
66:07:25:40:09:06:1c:03:48:88:7a:a7:0b:b2:2a:
b8:9e:45:22:7e:ad:1e:d1:c4:6e:a0:41:27:2b:28:
75:af:fe:8d:44:4d:9b:64:dd:90:66:2b:45:a6:9b:
39:d1:d3:0e:55:ca:48:bb:10:33:66:96:d2:50:fd:
7b:33:01:9f:d6:50:c6:73:58:e3:7f:9e:b3:09:81:
30:6a:da:37:4c:af:57:2d:86:85:a3:a4:82:7b:ca:
00:b6:aa:d6:3f:29:e5:c4:96:2b:e7:b8:11:18:9d:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.204.0/22
IPv6:
2a0b:8840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205802
Signature Algorithm: sha256WithRSAEncryption
a6:9e:16:65:8b:98:83:6a:c8:64:fa:2f:23:95:92:6a:ca:b1:
c7:07:fa:26:9b:d4:e0:ff:60:65:e3:89:a8:54:63:fc:e3:14:
f4:6c:39:d3:fe:5f:d8:dc:08:ef:02:82:46:45:58:90:23:2a:
95:be:6f:8d:89:e4:43:57:2e:db:7d:9d:fa:28:84:ca:28:cd:
80:0e:1d:64:27:f7:b2:7c:63:dd:51:73:1e:14:b6:fb:af:c8:
20:7f:81:3d:ec:e7:7e:b5:d0:ad:c2:da:b3:42:ad:7b:35:35:
05:10:bc:19:38:4e:47:0b:c4:37:ba:f4:42:43:19:77:a9:5a:
3f:f5:b8:9f:24:f5:1e:f1:22:98:35:6c:18:b7:36:c8:35:7b:
b7:b2:0d:68:c9:65:b0:0e:da:3a:35:34:68:fd:c1:01:5a:f3:
ac:67:09:d8:04:8e:1a:fd:e9:46:9a:2f:f4:ce:38:f3:e5:11:
3f:5f:7a:a2:a6:9f:70:38:b7:32:dd:88:cc:f5:4a:92:f9:d2:
3c:1c:ed:55:7e:4e:e8:b3:7e:f2:e4:f9:57:e6:48:24:49:21:
2e:fa:be:da:5a:ec:e3:9c:ef:5c:93:fa:3a:27:f9:b5:98:79:
82:e8:d5:30:55:8d:5b:5f:9e:70:23:cf:fe:42:74:3e:19:9d:
c1:47:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:02:00 2024 by rpki-client on console-ams.rpki-client.org