Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
File: ilX0iZwkbRdUoWiC0OdoB-uOK14.cer (raw, json)
Hash identifier: KFXX242lPOnX+J/cE6+i5iWaWsn+QDuQmSEhrJElh9A=
Subject key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3490C89A90614CCDB28013395A07B07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49754
IP: 195.130.194.0/24
IP: 2001:67c:247c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0c:89:a9:06:14:cc:db:28:01:33:95:a0:7b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:8e:02:af:03:01:0d:b2:50:02:2e:8d:8e:
70:85:36:32:79:63:bb:93:32:ad:74:b8:83:c1:de:
1d:42:12:71:42:e7:30:28:c9:e2:f7:d6:50:6b:d5:
a2:ee:1e:d8:86:f3:88:d1:63:9c:37:20:a7:09:c9:
cb:0a:02:e4:44:e7:b0:ec:b8:7d:f5:06:65:a0:24:
f9:d3:56:b5:cb:01:ce:db:a0:56:1f:c6:6e:db:1c:
a2:6b:11:d5:e6:f9:f0:81:76:7e:cc:fc:56:de:6c:
1d:5c:93:b5:00:13:63:e5:8f:2a:43:c0:36:c9:25:
34:7c:85:eb:54:0a:15:7b:51:1d:b5:3d:ed:b9:1c:
85:91:16:56:18:0c:f2:89:e3:10:bd:c1:18:60:81:
f7:bc:b8:ea:2e:46:c7:83:da:0d:da:51:ad:96:61:
fe:84:5f:4d:1f:fa:6c:c9:18:d7:08:f4:4a:ab:db:
04:97:05:b6:42:83:4b:c7:e4:3e:12:17:03:99:09:
0d:ab:f6:00:ed:49:84:82:94:0f:11:f9:ad:77:74:
a4:26:e8:39:7c:ae:0b:e8:69:19:18:d3:55:dc:6a:
10:9a:82:12:22:d6:4a:a8:1f:58:80:fe:0d:de:4e:
0d:fa:4a:fb:f5:08:30:f5:68:58:02:a8:ea:a0:f5:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.194.0/24
IPv6:
2001:67c:247c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49754
Signature Algorithm: sha256WithRSAEncryption
62:c5:2b:1f:82:af:ae:ca:54:01:09:c4:e0:d4:0b:0d:11:ea:
80:03:99:46:1b:c0:bd:d0:00:09:74:43:bd:08:14:8b:13:13:
88:b4:0f:44:6a:eb:1d:d8:f2:da:bd:3c:9f:61:5f:c8:98:6d:
94:8f:f9:8b:78:4c:14:98:4f:3a:68:54:85:52:18:d0:a6:fc:
26:87:27:80:b9:bc:50:68:9d:0b:81:26:7a:20:6e:bd:e5:d0:
92:f0:83:e9:4a:86:c1:db:f8:5a:28:72:b6:44:77:f0:6c:9c:
00:9b:51:bb:fa:07:63:4d:40:74:cb:b6:77:08:63:50:d0:ab:
41:4e:19:86:44:59:0b:53:a7:e0:0e:66:90:f3:53:e9:77:e4:
c3:24:55:ed:4b:12:b6:c7:b0:9b:b0:07:e3:17:d6:98:6c:30:
51:41:6f:76:26:98:3b:57:1d:5d:b2:df:e0:e4:e1:d6:66:88:
8e:99:09:5d:74:71:07:e3:94:9f:87:5b:01:51:24:d8:a3:70:
bb:77:2c:2b:45:c6:5b:60:39:55:fb:38:25:47:22:e8:95:1c:
8a:ad:57:7b:03:2c:d0:14:2a:02:99:0a:af:0c:64:07:d5:a6:
da:16:5a:82:d9:47:be:3a:89:22:be:5f:ab:b9:e5:35:dc:95:
ae:6e:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:55:32 2024 by rpki-client on console-fra.rpki-client.org