Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
File: k1AwYeGuUD7GPZcLMIdd2T_6u98.cer (raw, json)
Hash identifier: y7pWaoj2gEUITWYf2Gdy/uSb/QSYtMpImyG/zlROo+E=
Subject key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348AA0EA220B173987211235A42F46F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61969
AS: 206834
IP: 185.53.176.0/22
IP: 2a01:bb20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:aa:0e:a2:20:b1:73:98:72:11:23:5a:42:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:ed:90:d7:0d:77:9f:8e:9a:b2:d6:0e:58:
cb:93:fe:ad:e7:a7:0c:81:14:20:3c:80:e2:a0:29:
d0:bb:fa:64:12:37:93:ac:ff:85:62:52:aa:34:98:
26:a9:7f:96:c4:41:56:d9:92:97:4c:29:2c:56:6b:
23:81:f0:d5:dd:96:bf:2e:81:0b:4b:97:8e:02:8b:
ad:23:65:7e:4d:1f:b4:d7:73:ab:3e:a3:e1:ac:e8:
63:ca:85:f7:b0:3a:35:0e:26:04:a9:ba:ef:1b:d5:
9f:ca:fd:2b:97:92:e8:eb:08:98:b7:d7:fa:f2:d9:
ec:c9:49:aa:f2:f9:ca:1a:88:f9:e5:0b:4e:a6:b5:
9c:48:57:dd:16:6a:ab:b3:d0:3e:17:52:3f:d8:d2:
0a:cf:a8:02:e3:66:79:c0:77:77:b2:30:a5:19:f1:
d9:ed:bd:2c:e6:d0:80:9c:e0:75:b7:a1:a5:b1:fd:
41:f0:04:f8:15:2e:cb:f9:02:2b:04:62:7a:04:36:
57:3c:9a:cb:85:b7:ae:c0:a4:41:fa:4e:97:f9:69:
2d:35:f8:81:08:22:4d:a5:d5:f0:60:2c:32:71:ba:
a1:66:10:b2:6f:2e:a6:ce:e3:75:c4:32:1a:c5:b9:
cd:0f:bb:08:fc:14:9c:39:a3:f6:8b:de:43:33:58:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.176.0/22
IPv6:
2a01:bb20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61969
206834
Signature Algorithm: sha256WithRSAEncryption
ac:ad:95:e3:38:29:f6:c1:00:49:d1:f0:d6:28:c4:a0:f3:77:
05:29:95:6c:41:3e:c3:0c:73:46:4c:14:4f:18:5c:e7:ab:0a:
85:f2:78:72:b1:74:ea:21:61:ac:e4:54:28:ff:f4:3e:a4:4c:
42:f6:6e:69:5b:97:50:d9:5b:c3:cc:c5:9c:27:1f:9b:ed:0d:
36:83:dd:28:90:31:b7:f9:49:8b:09:68:a0:9f:54:2e:98:b9:
f0:b7:81:89:8c:24:9f:38:3c:8a:e9:8d:fe:35:7b:89:9b:de:
9e:93:9b:82:d8:63:49:02:3d:3b:4c:23:0e:67:17:97:1b:c6:
7a:94:9a:88:4e:d9:e1:c8:87:74:b2:8a:0c:e9:4a:76:c6:95:
e4:fa:be:03:5d:9b:dd:5c:c0:07:d4:49:0e:ac:9b:23:09:40:
5b:dc:4e:33:7a:ce:6f:67:41:aa:b6:64:db:ba:69:3c:38:e5:
f5:23:1a:43:fa:d8:0b:32:8a:08:e2:df:36:69:c4:3d:80:30:
8c:4a:dc:ba:fd:48:4d:1c:af:4a:86:1c:b2:ea:45:c2:13:56:
87:8d:0a:fd:38:75:ad:07:86:fd:ae:ab:34:1b:4f:9f:4c:67:
7c:ed:4c:c4:ad:c4:ea:47:25:16:f3:d1:02:b2:e2:e0:e4:c9:
cb:91:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:27:07 2024 by rpki-client on console-ams.rpki-client.org