Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
File: itN6mTOwUsLxLvG48U108F_dthE.cer (raw, json)
Hash identifier: ou6v3IqeYuv9UvXBuqC97cPhlNdCM9nbhECFGDrW7LU=
Subject key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA88F998B801166B4B805CF6C1B07A0E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Apr 2024 10:02:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34939
IP: 45.90.28.0/22
IP: 146.19.14.0/24
IP: 185.253.5.0/24
IP: 193.110.81.0/24
IP: 2a07:a8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:8f:99:8b:80:11:66:b4:b8:05:cf:6c:1b:07:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 10:02:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:2d:a7:97:ef:88:db:dc:c6:92:d9:23:fb:
cc:d4:cd:7a:94:f4:53:69:d0:41:cd:30:bf:c0:ab:
6d:c0:c1:86:d5:57:19:2b:80:8d:15:b7:ca:8d:46:
5a:c4:5f:f2:22:4c:6a:39:cc:fe:ed:2f:e4:3f:ce:
35:c2:cb:10:48:40:b6:71:7c:64:be:dc:fe:e1:42:
66:39:b6:90:2d:30:f8:1a:9d:2c:4c:ea:19:e0:58:
12:f3:e4:cd:55:79:db:11:c5:fa:92:53:37:27:4e:
78:10:a1:d7:bd:c0:08:5c:10:4f:77:68:96:08:1e:
78:7f:86:12:67:92:1d:b6:89:16:f1:60:55:58:ab:
1c:4d:86:4d:1e:92:33:d5:c3:18:0e:f7:ec:f1:f5:
cf:91:85:d5:c8:8b:6f:b4:83:25:64:ea:97:ac:a8:
2a:b4:e2:d4:07:d6:ef:b1:f5:44:ec:54:a1:0c:6a:
c1:52:62:ac:ec:f7:7f:7a:46:03:5b:8f:b5:b0:4d:
a4:9a:b7:5a:8f:ff:c9:fd:54:64:c2:92:89:e4:69:
6e:8b:5c:a3:28:cb:9e:b0:89:64:0d:57:56:17:8f:
3e:ab:3c:36:fd:68:77:a9:00:0d:5b:83:87:b2:0d:
64:64:44:90:bc:16:ea:aa:aa:a6:74:49:c2:14:a0:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.28.0/22
146.19.14.0/24
185.253.5.0/24
193.110.81.0/24
IPv6:
2a07:a8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34939
Signature Algorithm: sha256WithRSAEncryption
ae:0b:a7:9e:86:a5:a1:2b:84:57:1b:06:e2:ad:6f:8c:a3:e6:
d4:e4:76:a0:84:7f:11:95:28:cb:d0:2d:73:0d:53:5c:d0:40:
ce:4b:bd:5d:e0:9b:fe:cd:fb:04:76:79:15:ee:be:26:6f:0c:
9a:66:dd:4a:69:51:be:50:32:87:72:d6:f5:87:01:25:87:13:
19:9b:ed:58:03:9d:e8:ca:09:2e:3b:76:5c:b1:40:74:a8:aa:
44:32:32:ef:0e:eb:04:f4:1a:fa:37:97:e2:a5:5c:71:bb:56:
b0:15:65:dc:89:fe:39:ca:bf:0b:22:5b:b8:42:ac:24:7f:bf:
62:82:28:dd:50:db:a8:5e:04:b9:f9:eb:06:08:b4:82:c4:7d:
54:00:23:ea:ab:a1:a9:e1:8d:e0:15:90:07:3f:50:d6:99:fd:
37:cb:f3:60:18:05:5a:7d:c2:73:67:7b:de:03:3a:96:ee:25:
97:4a:b8:ca:8a:3e:c1:51:13:67:3b:60:2e:db:c0:4a:cf:59:
fc:51:b7:61:f1:de:e9:a3:f5:4e:2d:25:84:09:ad:07:9c:1b:
f5:0f:f9:e5:f7:42:af:9c:3b:e9:56:ff:77:52:ee:b1:e9:59:
c7:62:5a:84:7c:a7:94:53:a8:0b:a5:fe:51:e3:94:94:c6:4c:
45:01:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:34 2024 by rpki-client on console-fra.rpki-client.org