Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
File: is3dXDDVgOsP7soqFs9cWoslaP0.cer (raw, json)
Hash identifier: QdcZe7rzLwDIt1+Pr3X98h/+ThNv3NL/Xfg/vwVuahs=
Subject key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72696508B0226FC544F50788738D97E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209936
IP: 185.242.164.0/22
IP: 2a0c:e780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:96:50:8b:02:26:fc:54:4f:50:78:87:38:d9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:52:15:8f:1e:f9:87:25:19:60:1c:39:01:c7:
9c:54:b4:08:28:01:11:dc:4b:a2:be:de:a0:a2:bd:
44:57:e5:6b:1a:69:29:63:2e:07:e8:29:f4:e1:e8:
6b:41:41:46:7d:93:e2:3f:cd:85:b0:59:55:7d:f1:
6e:48:89:e5:ee:97:3d:61:1d:20:ea:59:00:4e:42:
86:ec:da:57:8c:04:df:9b:a4:99:a1:11:4d:7a:37:
a4:85:d5:44:e7:19:d0:de:9a:b4:32:e1:58:60:08:
a6:5a:36:9c:96:4a:ea:6d:87:22:98:bf:d7:a6:1f:
4c:5f:a4:18:46:ab:43:2b:9c:84:10:11:e5:66:63:
01:49:54:e4:cd:db:ad:e8:bb:e4:23:e6:5a:be:56:
8e:32:db:b2:2b:75:89:92:d7:a3:67:c6:0a:ab:de:
3c:bf:a1:99:75:68:37:5b:aa:d2:77:80:f4:2a:78:
2d:74:7b:2c:cf:7d:b0:bb:b2:bc:35:79:e6:57:e1:
2e:8d:28:6a:04:f5:c7:b4:f4:1e:2b:71:03:17:e3:
ff:c8:3e:2e:e3:79:b5:b1:57:93:c4:e6:6e:d6:48:
9d:72:88:fc:0e:de:d6:24:db:81:16:ef:2c:d2:1a:
76:c6:b7:82:93:aa:05:5b:05:6d:63:42:39:94:fb:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.164.0/22
IPv6:
2a0c:e780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209936
Signature Algorithm: sha256WithRSAEncryption
64:cb:ab:04:0f:9e:0d:65:88:c3:10:db:68:0e:98:93:f6:2c:
1c:2b:76:94:2a:5b:e6:a8:68:33:2b:50:b0:43:72:ad:bb:ab:
2d:f6:be:ff:16:a7:a8:69:7c:fa:6d:30:93:63:d5:6b:44:28:
95:9d:e1:c2:a9:c7:e4:32:81:a8:99:2d:0a:e7:62:4e:c7:8d:
af:7c:f4:94:6c:76:00:50:de:a8:e6:4e:6c:9c:a1:90:12:18:
e1:ae:7a:b6:6d:d4:94:31:e6:0c:32:94:47:7b:e9:18:a2:4a:
ed:7d:7b:7b:ab:a9:5b:d8:9d:3b:6f:49:83:52:5e:9b:28:37:
d7:b8:01:a3:06:2f:14:96:7d:9d:e0:56:ef:fb:cd:34:d8:87:
33:89:1c:2a:64:76:4a:fe:a7:f6:10:74:ea:ba:d4:ce:b6:cc:
a3:bb:bd:66:1d:e6:be:2c:1b:4c:d5:47:fb:5e:61:8d:5b:f7:
a1:6f:1d:00:d7:0f:df:12:b2:80:5b:f7:a7:ee:1b:59:93:13:
2c:38:62:c9:e6:2a:b2:55:54:99:79:c5:f6:9b:bb:f4:19:2d:
68:2b:f2:ac:03:bc:4f:90:9d:7e:60:20:71:41:e2:83:23:71:
ae:c6:2a:dd:ef:0a:52:49:5b:d7:d7:4b:e0:7b:d1:9b:ac:f4:
c0:72:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:58:56 2024 by rpki-client on console-ams.rpki-client.org