Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k0S0h58Z7nGaNRRjABcm9obWWe8.cer
File: k0S0h58Z7nGaNRRjABcm9obWWe8.cer (raw, json)
Hash identifier: NViS73jJBJnH1Ds7OS/fNElAzRspGrCcPkq8N+BfTL4=
Subject key identifier: 93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8C446BBFFF5552E8452B051E57C81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51432
IP: 185.55.208.0/22
IP: 2a02:22f8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c4:46:bb:ff:f5:55:2e:84:52:b0:51:e5:7c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9344b4879f19ee719a351463001726f686d659ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:9d:22:8f:7d:3a:d6:c8:97:7f:11:4e:f4:
0f:61:85:4c:f3:e7:e9:63:e6:28:20:f5:75:bf:32:
c3:7a:e9:50:98:1a:23:72:2b:5f:b7:41:b2:3a:f7:
73:78:99:aa:32:00:00:51:1c:ba:4f:a7:8a:b5:dc:
cb:5e:50:fe:a5:90:fc:04:85:0f:1b:52:4e:59:0d:
da:bd:c2:6a:57:bc:ac:28:f3:16:3a:e2:c8:73:9d:
21:2f:a8:2a:7b:d4:5f:fc:98:83:99:d0:af:f8:21:
0e:54:93:ce:27:27:39:46:62:f4:f0:31:41:56:b1:
f0:6f:c7:08:89:d9:b5:93:1d:66:b7:ca:92:30:e7:
53:85:99:83:ec:c2:b5:16:70:b9:04:c7:45:a7:7c:
bd:d8:9c:b5:ee:9f:78:8c:c2:95:9e:87:68:3a:47:
5f:de:7e:b2:81:46:12:a5:18:cb:aa:40:1c:42:a6:
9d:dd:d6:a7:68:6c:47:fd:eb:16:90:fd:36:af:3d:
93:1f:a3:08:66:08:fd:84:36:52:2f:12:2a:85:c0:
f5:c7:87:f9:f7:b0:54:64:84:3c:90:1a:67:ad:cc:
95:18:a0:48:7f:b9:a1:6e:4d:c0:b0:84:5b:6d:18:
c9:53:77:d7:e2:74:31:38:1c:8f:1b:7b:91:45:12:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:44:B4:87:9F:19:EE:71:9A:35:14:63:00:17:26:F6:86:D6:59:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5858f1-29c5-46e6-a76d-5a40e52cd481/1/k0S0h58Z7nGaNRRjABcm9obWWe8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.208.0/22
IPv6:
2a02:22f8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51432
Signature Algorithm: sha256WithRSAEncryption
11:a6:fa:7d:b3:12:62:12:7e:91:c4:5b:5c:2e:3e:af:a1:c1:
36:d7:70:09:37:a8:76:03:4c:d3:1a:ab:93:94:87:20:8b:50:
16:b9:a3:a5:b8:0c:42:68:34:5a:ef:5b:3e:3b:ae:7d:07:16:
eb:99:d8:b3:c0:ad:41:62:1c:25:a2:87:8b:4b:b0:44:f9:b7:
75:fe:8b:f0:5d:73:f0:a2:d6:84:a8:e4:cd:4b:e2:27:44:88:
7a:35:c7:7c:8e:5e:61:12:6e:b0:46:f9:f1:df:5a:3e:37:2f:
97:b2:5f:dc:b2:d0:39:00:d7:18:be:92:6c:bd:98:de:c6:b1:
31:b6:44:3f:63:34:04:3c:9d:30:f3:61:5e:a9:be:d3:f9:97:
1e:02:b3:52:db:d8:8c:63:2f:e6:9f:97:6d:46:68:ae:42:78:
9b:33:5f:cf:c6:c0:b3:90:02:ec:34:cb:48:b7:b1:9a:6b:fc:
4f:6c:74:38:84:d0:b9:e7:e9:d7:57:ab:b3:5c:0d:5d:70:26:
ec:c0:e9:75:72:39:05:13:86:39:90:f0:c7:55:6a:b2:5c:af:
34:30:e4:cc:6e:6b:b1:43:7b:c9:ed:92:fb:5a:5b:f1:b7:fc:
77:06:84:22:52:62:ad:41:7b:ef:65:13:e7:d9:f6:ed:3b:20:
5b:d7:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:54:36 2024 by rpki-client on console-fra.rpki-client.org