Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.cer (raw, json)
Hash identifier: 3Js9RQAbRZ+xvNaF2AhrSJhNsU3UCs4N9TMTWuRyGhU=
Subject key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192237738EE6857828CC01EB2FB7C58362E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Sep 2024 09:57:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24994
IP: 89.31.72.0/21
IP: 185.5.208.0/22
IP: 194.242.61.0/24
IP: 212.54.224.0/21
IP: 2a03:2700::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:77:38:ee:68:57:82:8c:c0:1e:b2:fb:7c:58:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 09:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:b0:7a:ad:c0:76:01:99:f2:ff:42:66:a2:
f3:8a:1f:e1:03:91:c1:48:f5:4d:54:02:81:62:69:
7c:34:17:42:65:81:d9:94:16:63:06:2e:8a:82:55:
3d:9f:df:a0:66:59:c2:33:62:c1:c7:0b:84:0d:3e:
4b:ab:68:d2:92:66:28:52:cc:7d:1b:86:c4:e2:a4:
86:09:8b:83:a2:1d:43:5d:d1:2a:95:db:ce:59:ec:
1e:4c:a7:88:cf:ed:0c:4e:d2:15:7a:b2:af:81:81:
39:d1:fc:a0:26:44:33:29:1c:e0:01:fe:be:ad:d7:
85:ec:8f:0d:11:4a:82:46:36:a5:28:3f:29:12:b1:
8d:bc:d7:fe:4e:73:04:2c:65:2f:f4:5f:f5:3d:d3:
2b:84:13:95:0a:7e:72:e7:1e:d7:f1:38:e4:09:c8:
5d:37:70:70:84:6c:39:2f:71:f2:58:19:4c:c1:37:
6d:ab:89:75:3b:ac:ba:55:41:a0:eb:69:8a:c8:b0:
50:bf:1d:ae:7d:77:a3:af:e3:06:9f:55:86:ef:4c:
97:82:e0:06:3d:c6:4c:aa:9f:16:73:61:72:1a:ff:
30:f0:17:ca:e5:3c:30:6e:e7:c2:9e:32:e7:f8:62:
0c:81:c9:da:4f:94:f2:8b:91:3c:84:25:e7:13:9a:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.72.0/21
185.5.208.0/22
194.242.61.0/24
212.54.224.0/21
IPv6:
2a03:2700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24994
Signature Algorithm: sha256WithRSAEncryption
4c:66:ef:d2:92:e5:85:a2:f9:bc:54:e9:5d:f4:7b:3a:7e:84:
19:d5:fc:6c:8e:f7:e9:23:f5:d6:e6:b3:db:8c:20:e6:2b:83:
37:7e:f0:5a:5c:71:45:b2:d7:e4:31:ec:bb:04:f7:fa:69:65:
c5:3e:83:8f:10:e7:38:19:c7:1b:e0:57:a2:d9:70:91:82:cb:
c3:ac:df:54:75:70:25:9f:94:c4:8e:22:36:26:af:c9:f2:15:
3e:4d:a6:65:c3:32:b1:a5:25:7e:7d:05:49:cc:77:ca:61:a7:
67:5b:48:a7:4f:a7:57:3a:e1:02:f3:88:02:c1:43:5f:9c:f4:
7a:70:60:73:c7:40:ba:77:51:13:e9:29:4c:9f:35:f5:f1:00:
72:ea:e5:c9:5a:8f:17:08:9f:07:4b:55:1f:a2:4a:ba:25:27:
15:85:f7:83:b9:d9:92:5f:2b:0a:0d:06:6b:c6:13:85:95:1e:
5a:81:c6:9e:da:ea:bb:b4:48:a2:d3:a4:f6:42:17:72:bf:1f:
df:73:af:c7:7b:90:4f:ae:54:8d:5b:8f:c6:85:98:08:a6:13:
b3:bf:63:0f:f1:dd:c3:e2:59:5e:ff:3d:a8:3b:46:14:bb:15:
c4:8e:9f:99:2e:4c:23:9c:aa:28:c7:c3:fa:b7:86:89:aa:19:
af:c4:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:35 2024 by rpki-client on console-fra.rpki-client.org