Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
File: fD2KpDg1BKMa_0sAaBCga88DBa4.cer (raw, json)
Hash identifier: gf6mf7dJltgyAWv/uGARUjaAyhhACgaWyBTtMdpPzBA=
Subject key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A103BA8B7D857128309DECC54B586
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 30886
IP: 31.43.64.0/19
IP: 91.196.52.0/22
IP: 94.231.64.0/20
IP: 193.27.208.0/23
IP: 193.84.22.0/24
IP: 2001:67c:23a0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:10:3b:a8:b7:d8:57:12:83:09:de:cc:54:b5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:30:95:7e:9a:75:8b:88:83:5c:35:63:9d:
d2:32:3e:e7:94:44:11:56:f0:3a:90:cb:e4:11:4e:
84:20:00:ec:f8:61:af:33:fa:23:23:ce:77:f8:76:
93:11:ad:bc:c0:21:67:0c:ee:12:2d:3b:df:a2:8d:
68:95:bf:d2:05:99:10:de:b7:15:1a:f5:7c:0d:56:
12:84:6b:09:27:74:14:43:af:c3:2b:36:37:28:31:
30:d2:7d:6b:7c:7e:af:98:ab:2d:c5:c1:f1:8d:8f:
06:0c:74:71:df:e3:0d:33:76:ce:1e:17:4d:2c:89:
dd:4b:b8:bc:ef:6d:91:5c:29:8d:38:05:29:13:34:
5d:6c:ed:25:ad:f9:f0:5e:46:6f:3f:b4:8e:bf:cb:
96:66:ca:5b:a2:d8:a2:e6:8e:31:d1:0a:5c:3f:7a:
c6:44:6f:ef:f0:24:5a:b0:f7:d6:36:9e:27:67:4f:
2c:5e:6b:d5:72:12:87:4e:72:e3:03:aa:dc:7a:aa:
ea:e0:df:30:24:e9:28:2b:ac:3a:c8:8d:6b:32:99:
e5:10:2a:32:98:6b:dd:2f:67:1e:d3:5c:e0:e5:b6:
48:fd:2f:26:91:bc:ec:04:c9:88:1f:50:30:c2:f4:
3e:88:05:b9:34:28:db:c8:c6:0b:27:fd:9a:f7:e7:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.64.0/19
91.196.52.0/22
94.231.64.0/20
193.27.208.0/23
193.84.22.0/24
IPv6:
2001:67c:23a0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30886
Signature Algorithm: sha256WithRSAEncryption
7b:80:d9:ad:07:c8:4d:1b:40:af:7c:b9:3a:9c:c7:e0:3a:44:
77:27:b2:67:86:72:70:c0:12:46:fb:d0:78:54:6c:d8:e0:00:
bf:b0:63:b6:dc:f8:5c:40:4e:58:5d:36:8e:a9:49:54:87:54:
e1:c6:3c:65:a2:c2:f1:0d:9c:07:e7:fc:c8:84:54:46:0f:59:
f8:fb:65:31:6a:0b:76:5b:f8:da:6f:7f:ae:3e:29:d5:e4:bb:
92:03:79:f6:f8:9c:70:e7:6e:f2:d5:a5:32:06:5e:57:92:55:
2e:51:85:57:78:15:81:60:28:87:a7:8c:b9:52:8c:0f:df:bb:
c1:c3:8b:9c:bd:e4:1b:2a:da:7c:92:d7:a2:b5:3e:b1:39:46:
cc:19:c3:ee:af:8c:3d:eb:48:dc:49:0e:84:78:31:fd:db:46:
a9:b8:9a:c0:4b:ec:4d:83:26:e0:fc:c3:c3:08:79:d1:bf:d6:
e7:f4:f4:1b:2b:83:59:32:09:82:6b:55:48:4f:0a:7f:b4:2c:
66:b0:4b:50:44:fa:ef:25:80:cc:a5:89:76:86:10:f8:bf:05:
16:19:c4:5e:af:25:39:a9:e7:1e:64:b6:43:63:b6:03:e5:df:
55:f5:a1:29:07:aa:0d:1b:04:81:18:bc:96:7a:21:f6:d8:c6:
0d:14:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:48:53 2024 by rpki-client on console-fra.rpki-client.org