Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer (raw, json)
Hash identifier: hLLutQCUAmh3InwnwwPDuM4ecM7L29FHpYs6bR56ceo=
Subject key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF7221DBFE21A0FA92741A1BCDB0DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15955
IP: 185.101.48.0/22
IP: 212.77.32.0/19
IP: 2a06:1940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:72:21:db:fe:21:a0:fa:92:74:1a:1b:cd:b0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:47:1c:2c:9a:d3:14:9e:ab:7f:33:88:12:
ed:a1:22:66:46:a9:fa:d4:d0:52:05:32:8a:e9:74:
6e:51:04:31:1f:e8:58:26:e0:11:70:bc:a4:82:ea:
96:a2:75:57:fe:93:03:e6:76:e3:dc:2a:7a:b3:b5:
be:36:67:e9:5d:95:d2:b3:0d:bc:c6:42:53:90:31:
fa:b8:51:d1:ed:30:b3:75:c6:45:a0:02:fa:4b:0f:
a5:3b:05:c3:34:28:cd:1b:2d:2c:73:97:fe:31:1d:
1a:c0:bc:8e:6c:9f:fb:2f:dd:75:17:a2:25:e9:fc:
ae:a9:96:6b:ae:ab:77:32:d0:f5:4d:3e:4d:69:83:
68:fc:4b:56:d1:c7:88:30:20:b9:e0:52:58:64:6a:
1c:fa:90:5a:49:e3:91:ba:c2:ed:c0:c6:ea:52:92:
bd:6e:25:95:a0:1d:d7:a3:b9:73:27:78:5e:32:94:
ae:1e:6c:0d:6b:8b:74:51:e4:43:bd:c5:7b:c2:db:
90:1b:9a:75:a9:54:2a:8d:83:aa:7d:58:61:aa:ff:
8c:84:91:61:e0:27:b5:de:ca:fd:af:f3:ca:76:d9:
c4:cd:ce:02:06:aa:16:c1:84:d6:bf:f7:fd:7f:89:
eb:38:d8:9a:ee:ce:2c:33:73:51:30:14:d5:7f:f1:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.48.0/22
212.77.32.0/19
IPv6:
2a06:1940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15955
Signature Algorithm: sha256WithRSAEncryption
27:1c:b4:06:34:68:c5:9d:43:5d:14:c3:66:a0:c9:fb:0e:4b:
4e:16:55:f2:29:80:48:65:4f:82:52:6b:05:b3:57:1b:aa:5f:
44:aa:cc:6f:86:81:bb:68:f4:5f:19:bc:4e:d0:72:b4:17:40:
79:6e:46:4c:c6:5c:a4:63:d6:6a:48:74:90:91:4e:b3:15:d2:
6d:9f:07:34:75:32:9c:e8:d4:cc:4d:10:12:bf:f0:99:7b:7f:
5b:a6:80:14:4e:87:5e:07:ca:93:8f:05:f0:00:c1:29:49:cf:
7d:bc:c6:ad:2f:81:d7:1d:29:6e:49:e9:d9:20:6b:f5:31:4d:
fd:28:16:a7:ee:c9:ce:01:99:7a:7e:dd:27:84:b6:4c:e2:53:
21:cc:0a:df:40:4c:47:a0:e1:ee:74:0b:02:f8:0c:e7:f2:f7:
af:f2:4e:3f:1d:a3:d4:55:43:50:be:12:82:7b:96:61:f7:94:
59:62:23:eb:58:8b:d1:6c:7a:ec:c0:6b:50:a2:5a:dd:f9:46:
d2:d6:b9:55:52:95:c7:64:0e:15:0f:fb:b1:3b:9b:ba:03:e4:
95:b7:e9:83:f4:36:d5:e5:72:a1:f8:5b:f7:12:f5:cf:05:70:
0e:fc:7f:33:22:0d:c5:7f:cf:19:a3:fb:7b:e4:55:26:1a:d9:
93:20:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:07:25 2024 by rpki-client on console-ams.rpki-client.org