Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
File: i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer (raw, json)
Hash identifier: QDnoiytxRZ9BGCpQUn022cQ7f1N3mDC4pR0Aekskz88=
Subject key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F422E03BFF9CE4AF4091EB2728AD763
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 8987
AS: 9059
AS: 39111
IP: 46.51.128.0/17
IP: 46.137.0.0/16
IP: 79.125.0.0/17
IP: 87.238.80.0/21
IP: 176.32.64.0/18
IP: 176.34.0.0/16
IP: 178.236.0.0/20
IP: 185.48.120.0/22
IP: 2a05:d000::/25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 May 2023 06:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:2e:03:bf:f9:ce:4a:f4:09:1e:b2:72:8a:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:8c:c4:13:26:bc:0e:fa:7f:50:6c:14:cf:
fe:6d:a0:9b:50:10:04:8e:55:d9:58:35:5a:3a:f5:
9f:c6:35:94:29:4b:97:98:bb:4a:32:9d:b8:fa:ab:
46:65:8d:99:4b:89:81:0f:77:31:43:c4:51:7e:0e:
af:3f:53:e7:fb:56:5c:8a:42:bb:50:68:b6:0d:cb:
00:77:89:ef:aa:96:fb:22:47:06:17:22:4a:1a:13:
a8:a8:00:a1:69:f5:cd:96:99:d7:85:47:6a:33:7d:
74:bb:65:43:8c:5a:d3:1e:e8:01:ac:ab:82:a3:4f:
a8:8a:72:ef:6c:cc:a0:8c:2f:4f:53:1c:42:b3:e6:
cb:7c:47:d8:35:60:aa:85:f1:30:38:77:86:a3:db:
e7:a6:cb:ef:c4:39:eb:20:e5:aa:fc:09:57:df:cc:
c3:31:d8:bb:16:08:fb:4b:84:9e:f8:a7:78:d3:68:
c9:ac:91:46:4f:b7:a0:c0:21:d5:0e:e5:25:27:0f:
57:38:b1:6b:cb:06:bf:2b:06:08:da:84:8d:c5:d4:
42:ff:25:2c:55:f0:e6:cf:2c:3e:b5:d0:ba:a5:f0:
31:8f:9a:5b:4b:80:7e:e7:d4:6a:4e:58:a0:66:b7:
24:68:cb:fc:8c:17:bc:3f:cd:7f:ee:df:a2:db:5e:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
46.137.0.0/16
79.125.0.0/17
87.238.80.0/21
176.32.64.0/18
176.34.0.0/16
178.236.0.0/20
185.48.120.0/22
IPv6:
2a05:d000::/25
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8987
9059
39111
Signature Algorithm: sha256WithRSAEncryption
18:6a:6c:cd:18:1b:21:c8:aa:47:de:55:ce:76:25:2f:40:56:
67:68:b6:72:60:66:35:cc:fb:dd:6d:d8:6b:8c:f2:0c:3b:d1:
89:24:3e:33:f8:8a:0d:5b:5d:ee:f3:e4:65:7f:62:ae:61:42:
fa:67:ab:12:e3:84:46:09:5a:82:5e:0a:db:52:1d:27:bc:bc:
2f:55:ac:90:34:60:5d:c3:71:b9:16:ae:60:d7:db:b9:fd:5d:
c1:02:5f:cc:c7:aa:74:d9:90:2e:77:95:5c:d2:96:bc:3f:6a:
0d:48:93:f9:07:62:72:ca:20:b9:27:ea:e4:bf:d6:2f:50:5b:
2f:e3:54:99:d2:8e:0c:78:73:61:49:fe:3c:cf:1b:81:d0:71:
f8:27:76:9e:f7:d7:be:4b:3d:49:4c:6f:1a:c6:cd:8b:82:c4:
2a:0a:91:b7:2d:a6:0d:68:e2:6f:f3:31:db:32:67:4c:3d:14:
92:ba:dd:18:e8:1b:f9:7a:2a:63:fe:7a:d7:68:2c:53:50:94:
2c:52:c4:94:03:3b:35:af:13:d2:38:f7:e0:51:d7:03:d3:1e:
76:d3:32:06:14:01:96:3b:db:d8:80:0e:0a:92:78:56:cd:c8:
36:b1:3a:f4:9a:63:6c:5d:ab:3c:5d:ce:17:33:cf:14:03:77:
6a:31:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 3 14:51:31 2023 by rpki-client on console-ams.rpki-client.org