Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
File: i5uprd6WNXd79Yb9ST4UzTD3xMo.cer (raw, json)
Hash identifier: 2cf/4kCM1FkAsQbwVFPoCDj5tfMZyqTz41JxVzyz6Ec=
Subject key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC265E525634E8079EA3FF6D304484DE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:21:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199673
IP: 185.121.236.0/22
IP: 188.164.152.0/21
IP: 2a01:bbc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:65:e5:25:63:4e:80:79:ea:3f:f6:d3:04:48:4d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:21:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:47:3f:53:3a:e8:a2:ff:58:aa:e3:e4:20:
ee:96:a2:cf:54:10:2d:5b:56:57:4f:8f:68:b5:c1:
10:9c:05:c6:b5:b5:0f:d0:e5:cb:39:e5:5b:d5:5b:
4f:09:68:9f:77:9f:08:89:fd:64:30:13:2c:96:47:
70:65:62:4c:af:18:4e:da:0a:65:3e:30:32:44:e2:
ad:0e:15:b3:85:d3:17:e1:c9:98:a2:82:e0:c3:0e:
49:37:20:c6:32:1c:b1:fb:88:61:03:ad:4f:62:e9:
9c:ae:90:5f:9e:69:bc:14:38:e2:42:32:24:77:6d:
c9:f7:e8:c3:09:0a:64:09:3b:a1:3b:95:18:4f:10:
2d:ef:5d:37:29:19:e6:d4:4c:55:0c:e2:fc:36:c7:
90:56:2b:20:bd:9c:0e:36:82:e1:a6:5d:8b:04:57:
85:9c:04:81:85:90:39:84:fc:24:6a:05:77:6f:85:
08:ab:50:32:3b:5f:29:46:f9:39:02:f6:07:6a:07:
13:ad:7b:bd:cb:f2:dc:d5:46:72:8e:d2:1c:ec:3c:
c4:69:7a:b9:14:e5:06:28:d1:92:54:2a:c2:be:af:
df:ff:48:bd:87:3a:39:11:88:5a:c6:87:d8:da:5b:
8e:42:24:80:6b:2b:a1:db:7d:53:e1:36:bd:9f:b7:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.236.0/22
188.164.152.0/21
IPv6:
2a01:bbc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199673
Signature Algorithm: sha256WithRSAEncryption
15:32:50:e7:2c:25:d9:66:a1:61:20:fd:eb:03:bb:3e:0e:ae:
ee:6b:e8:9e:24:5a:4e:c9:e1:b6:e7:8b:6e:cd:1d:7e:44:0c:
48:87:77:91:06:76:e6:27:28:66:11:15:50:8b:c0:e1:f4:70:
96:b3:a6:37:58:bf:1a:7c:6a:12:37:71:1f:b0:d6:ca:1f:56:
9a:2c:f1:47:26:70:ae:d7:55:df:4e:85:53:64:1c:5a:99:7b:
b9:1c:d0:ce:f1:03:88:91:ea:af:15:c9:c5:35:2c:db:5f:4f:
2e:14:83:f0:db:7a:69:a7:ba:f3:c7:02:97:4e:44:a8:50:a3:
d4:5a:e5:f6:c8:bb:45:45:dc:9d:71:c5:91:94:cf:91:13:ff:
c4:86:f5:13:de:40:8e:f5:f6:d1:ee:70:dc:98:e3:51:b8:3a:
82:38:23:ca:66:d7:34:4e:39:2c:e2:f9:90:a4:7b:ae:06:e9:
89:0f:ab:72:27:cb:0d:a3:18:38:db:9c:2e:db:a9:22:d5:8b:
f5:08:9f:f0:aa:d5:45:22:46:16:d8:31:08:d1:69:2c:27:49:
23:c7:e0:48:e6:1d:7b:58:1c:1c:d5:33:ce:27:f2:3f:7e:2c:
95:6a:e0:c2:72:c5:70:49:c0:c2:c9:f5:92:77:e6:be:04:fb:
18:b6:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:10:19 2024 by rpki-client on console-ams.rpki-client.org