Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer (raw, json)
Hash identifier: M/PHL3mMwkJjkUTjYcFWX+p7urZgnBs93FgfnTEgzh4=
Subject key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D2850A7258E58E9B2F5E45B76E34A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 30851
AS: 203227
AS: 211315
IP: 83.142.168.0/21
IP: 85.11.64.0/18
IP: 85.198.192.0/18
IP: 93.176.192.0/18
IP: 217.173.160.0/20
IP: 2a00:1d60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:50:a7:25:8e:58:e9:b2:f5:e4:5b:76:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:83:38:64:fc:5c:67:20:d2:8b:bb:b6:19:
ac:fc:7c:9f:fd:e7:73:1c:2b:d7:50:f7:26:46:24:
91:a3:77:84:af:dd:c7:65:4c:bd:86:90:9f:3c:93:
8f:8c:f0:14:5d:24:c9:aa:59:a8:c9:ae:a8:3f:1b:
75:c0:e1:c8:4c:6a:26:7a:91:23:4e:3c:79:57:9d:
d5:a8:3d:95:d2:34:c0:53:a1:64:71:0a:90:71:d1:
b6:6c:85:6e:8b:30:ed:4a:9b:03:33:19:29:8d:e4:
9f:d9:7a:f2:69:90:09:bb:ce:4e:e4:38:ec:6a:aa:
78:ea:e5:77:5f:d1:a7:2b:e2:a8:0c:cb:4a:cf:c0:
4e:f6:e1:c5:60:c7:f8:ed:fe:40:9c:d9:91:fd:4f:
0e:a7:d8:36:06:fe:df:f3:83:f5:db:2b:40:bf:57:
42:27:04:e7:ca:76:5f:0b:31:f9:1e:57:9f:d8:71:
1b:e8:66:3f:8c:af:28:b0:44:01:07:80:bb:45:37:
a5:b4:bb:db:f4:4c:ab:da:e5:a7:bd:71:b0:c4:d9:
1e:70:cf:7c:09:e1:ee:92:2f:1c:d5:88:50:11:5a:
be:93:7e:e5:d5:8f:12:de:9c:c9:c6:18:31:c9:a5:
e7:04:00:e6:ba:22:df:6b:ce:11:e1:f6:d5:71:32:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.168.0/21
85.11.64.0/18
85.198.192.0/18
93.176.192.0/18
217.173.160.0/20
IPv6:
2a00:1d60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30851
203227
211315
Signature Algorithm: sha256WithRSAEncryption
8a:c5:af:da:53:31:85:02:44:f7:51:11:8d:67:af:92:a3:0f:
cf:62:ff:00:eb:85:fb:e9:1c:9a:2c:7e:cf:6d:da:98:85:6e:
ed:9c:13:f8:2d:c9:61:14:04:af:5b:0c:19:2d:87:1d:cc:51:
63:d4:a0:a4:30:d6:31:fe:06:15:f9:c9:89:0d:14:ab:d3:0c:
3c:21:2c:cc:fe:f5:36:18:25:d0:f8:31:03:d3:c7:14:92:a2:
2e:b8:3c:a7:45:14:9c:20:21:3f:76:2d:35:bc:44:ad:fd:92:
53:8d:89:7a:fc:2b:6e:ee:40:98:ea:ef:ef:10:70:d5:1c:39:
0e:c3:c7:a8:3b:5a:4e:9d:71:6a:82:51:8c:43:c4:d8:82:36:
a6:ee:e1:98:0b:22:84:a6:32:9e:1b:47:3a:3f:3b:87:b3:94:
8f:1a:da:93:c6:78:57:33:f0:1d:96:f1:63:d7:bd:de:f2:e8:
8e:0f:e1:38:5f:a8:39:14:37:fc:f1:2c:4c:67:f0:c5:07:c3:
db:4b:0a:ff:75:1e:41:d4:5f:5a:ac:fc:94:a1:9b:a4:56:a0:
ba:46:f7:09:b1:8d:7b:eb:75:be:ab:08:56:5d:c0:59:62:7f:
28:c3:f1:fe:8c:18:e9:06:a8:3c:ac:0a:54:54:3e:be:76:9c:
2a:08:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:46:59 2024 by rpki-client on console-fra.rpki-client.org