Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.cer (raw, json)
Hash identifier: HyU6wkg4iUhcw1AwBWjg+EDbWfwrBQtBdNhWKc+dJgs=
Subject key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC0F09BFF7BF8B44188A7546A2C474
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51768
IP: 91.220.99.0/24
IP: 185.176.236.0/22
IP: 2001:67c:340::/48
IP: 2a0a:2680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0f:09:bf:f7:bf:8b:44:18:8a:75:46:a2:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:b9:a9:21:0c:fc:54:c8:49:bc:eb:86:75:
f0:4f:6b:0e:c5:d9:6b:ab:11:78:4f:29:2d:02:7c:
ef:3e:27:92:84:32:7a:c4:2f:b2:e5:75:a7:5f:97:
5e:53:45:e3:9d:5f:ea:0e:74:3e:90:7c:85:6b:27:
85:af:a5:8b:5c:6e:62:3d:19:29:f0:c9:5e:c5:99:
cd:ae:d2:99:ec:e5:22:46:b7:33:a1:c1:9d:49:a6:
a6:be:1f:b9:ab:00:6c:84:a6:e3:ea:5f:8a:67:07:
a8:e4:9c:17:d8:9f:47:92:cb:79:0b:57:4b:7c:a5:
75:f9:e3:e7:da:87:32:29:ba:25:db:08:9c:bc:c1:
7b:6a:b2:2f:ca:2d:16:cb:97:b5:27:10:68:36:f1:
b6:b9:22:f7:93:e4:d3:3c:27:f8:99:9f:fa:e6:36:
18:8d:9c:b8:eb:83:3a:52:80:b1:47:ad:e0:f0:e1:
1b:b4:49:8b:5a:57:ef:b8:54:0b:38:1e:90:f3:83:
f9:bd:51:e9:25:21:37:51:0a:ec:8b:eb:85:33:5f:
c6:c1:15:fc:a9:49:19:7d:a0:ed:52:77:97:af:ad:
8b:91:f4:83:be:dc:36:79:7a:65:43:3d:c2:87:e6:
65:b4:59:50:ba:cb:bb:7e:c7:6c:30:e3:30:0b:81:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.99.0/24
185.176.236.0/22
IPv6:
2001:67c:340::/48
2a0a:2680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51768
Signature Algorithm: sha256WithRSAEncryption
86:76:a2:7f:7c:9a:69:27:50:5e:e7:08:e3:7d:42:f4:f9:4f:
0f:96:a1:82:f2:f3:54:d8:b2:29:22:55:ec:41:a0:48:8c:8f:
1d:ed:3d:20:e2:cb:f3:0e:36:8c:b6:5c:55:2f:a1:ff:f2:12:
a5:d7:4d:93:30:80:ce:93:8b:01:1d:09:5e:3b:3e:ef:1f:eb:
dd:a8:77:21:14:ab:81:6f:49:a2:01:a3:af:6e:1a:8b:3c:24:
48:26:43:2b:b9:c6:6d:cf:5f:08:03:2b:cf:ba:c7:5a:ec:86:
af:55:6a:98:fc:24:0d:b9:f6:38:11:a9:51:69:5a:89:14:ac:
56:0b:ce:fd:e5:2c:24:a5:ca:38:30:aa:2e:f2:50:c6:d7:a2:
55:6f:e2:0d:20:75:46:0f:e3:7c:14:3e:da:c5:ba:46:23:6e:
80:a5:c8:75:e2:a6:2f:a6:22:3f:68:3e:4d:c8:44:50:65:13:
14:ff:77:de:9e:28:4f:17:dd:5b:e2:e7:34:b3:f7:d0:5c:97:
af:e8:1c:d3:3a:7d:cc:12:e8:ee:ef:5e:60:fc:3f:48:c8:b1:
a3:1b:5a:74:85:d1:7d:7d:f1:51:74:5a:63:6f:92:52:df:be:
48:98:b1:db:37:bc:13:0d:09:4d:34:70:bc:9d:bf:71:ea:a5:
ae:b3:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:02:56 2024 by rpki-client on console-ams.rpki-client.org