Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer (raw, json)
Hash identifier: B/R9BGyDZvkj/UbP/jq7ZF50kLfTEwwBZy3LBbicuAw=
Subject key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424574E1107E88121E01C3D1F705D66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207282
IP: 193.135.20.0/24
IP: 2a10:6000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:57:4e:11:07:e8:81:21:e0:1c:3d:1f:70:5d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:4b:61:0b:d1:74:a9:c3:bc:f9:0e:fc:07:
0f:d9:2f:e9:a7:16:35:80:b0:f8:a7:37:78:96:a5:
bb:1c:76:06:3c:26:7d:a7:56:75:99:87:69:77:08:
d6:43:4f:bf:8f:fa:ae:c8:69:de:2e:d7:d6:8a:66:
99:c4:f6:d7:54:f7:b2:98:2c:33:06:d9:f2:88:1f:
3d:78:a9:d7:70:34:03:09:c6:25:21:b1:31:2c:78:
00:8f:33:3b:4c:d9:1d:61:7c:be:c8:02:87:83:66:
68:49:f3:c2:12:36:78:ea:47:14:be:ee:0b:a6:03:
98:a5:ee:42:9e:77:44:4d:7d:27:9c:23:9e:1a:61:
01:e5:df:11:97:f1:b6:df:e4:cf:bc:26:79:3b:93:
8c:4d:7e:5b:86:0b:1d:62:5b:05:17:36:54:bd:45:
95:b5:28:8b:b1:ec:12:4a:3e:13:36:40:c0:36:d2:
0e:63:f0:f1:99:fc:47:27:da:ea:20:b9:09:6d:97:
c9:6a:ab:d7:7d:3c:6d:1e:1c:42:03:48:f7:a8:11:
2d:c2:6a:62:89:5a:f3:09:13:85:0a:7a:46:8b:37:
6e:fd:5b:c7:5d:86:d1:d9:f3:33:9d:cc:43:e8:72:
f4:73:ec:de:2a:82:b3:df:60:3d:5c:de:37:d9:e1:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.20.0/24
IPv6:
2a10:6000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207282
Signature Algorithm: sha256WithRSAEncryption
59:a7:9a:70:35:a2:1a:be:cb:82:a7:37:10:15:da:46:3c:60:
4a:65:5b:15:63:18:1b:b6:74:ef:10:f7:87:45:f3:90:82:e8:
3d:c7:c6:2c:73:5e:82:ec:85:44:40:39:16:3f:a4:f4:2b:68:
4a:bb:75:a8:42:fd:40:32:cd:91:d9:ac:0d:94:05:73:0f:13:
66:fa:4c:85:5b:c2:7a:95:a2:64:c6:1a:f9:c9:4f:96:79:4c:
07:ae:7d:b1:41:b8:e9:67:3d:15:19:49:71:27:57:bf:62:0f:
54:99:c7:2e:97:81:82:46:1a:e9:ae:a3:fd:92:32:03:1d:20:
c7:d6:9f:b6:c6:f5:70:5b:ba:8a:32:09:b8:16:16:d6:d7:12:
7a:c0:d3:9e:c1:0e:9d:8c:98:3d:30:66:d2:c9:d6:99:36:75:
e1:5f:a1:6e:fc:dd:10:af:c2:3e:c4:e0:6e:92:4d:27:9e:d9:
03:b1:5b:e4:e7:0e:75:14:da:2d:22:2b:e2:05:a6:a6:d1:c6:
10:f3:e3:a3:4b:38:9f:74:f9:e0:73:65:63:3f:dc:3f:20:11:
4d:10:38:02:f4:93:8d:e6:6a:c1:27:bb:fa:83:fc:29:d4:c0:
b0:3c:20:e9:48:9e:cc:1e:de:38:63:8e:c6:6e:b8:1e:1d:7e:
30:15:53:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:52:48 2024 by rpki-client on console-fra.rpki-client.org