Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
File: k8XxCvi8tfxuNKRztKbK560C2QI.cer (raw, json)
Hash identifier: i4QK7v171skPVNPj5K8fuLcYaG6Ma9sYtozC+5EYVm8=
Subject key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80123311DE545529CB37EF1FBF17625
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204954
IP: 91.244.126.0/24
IP: 2a13:4f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:23:31:1d:e5:45:52:9c:b3:7e:f1:fb:f1:76:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:c6:4a:f1:37:01:e4:b3:04:97:9f:1f:60:
23:1a:6a:df:1b:bc:d0:49:99:7d:5b:b3:50:2c:42:
8d:4f:51:95:eb:e6:77:9e:65:a2:08:5d:6d:dc:c6:
19:6e:c3:19:60:ed:12:66:e7:f0:24:c2:c5:74:13:
14:46:e5:c1:e4:7c:fa:2b:e1:b2:99:8b:c8:07:d8:
c7:af:a2:d4:7d:96:13:92:d2:f3:0a:eb:0c:77:92:
90:93:f0:41:f1:00:01:ba:48:7c:9b:ef:58:5e:68:
e9:18:d4:f5:0c:f6:4d:c0:df:78:86:b4:87:53:9a:
35:60:6e:df:b4:64:e3:b3:fe:1d:55:5e:bc:22:83:
96:be:f8:ef:0e:99:7e:7c:19:11:06:88:38:d3:1b:
d6:a4:3d:d3:fb:05:16:52:53:26:0a:9e:aa:ea:ae:
58:65:ae:39:7b:8f:ca:03:f9:3d:f3:4c:c0:dc:df:
1f:96:bb:5e:ee:af:23:d5:e3:53:79:63:78:0c:15:
91:94:a3:91:ba:44:7e:30:14:9a:82:14:d3:1a:be:
e7:24:66:a0:bd:a5:95:3f:b3:1b:3b:9c:d3:b7:1b:
95:dd:95:ed:c4:aa:1b:72:01:99:56:14:d6:de:f2:
0f:b6:e3:af:1f:61:50:b3:1b:ab:fd:db:45:4a:92:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.126.0/24
IPv6:
2a13:4f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204954
Signature Algorithm: sha256WithRSAEncryption
39:b6:2b:03:dd:c5:c3:e8:29:1b:8f:ba:c0:cd:1b:39:d6:ca:
da:3c:37:56:e7:40:ed:4f:aa:aa:eb:b7:93:35:4e:69:84:06:
30:5b:ee:aa:1d:20:3d:c3:66:5c:4c:29:a9:7b:ef:8f:6f:55:
4d:0b:76:f8:c6:70:b8:37:83:ef:c1:22:0b:40:20:36:99:17:
fe:23:95:ed:b9:bd:a5:d9:41:64:96:7a:14:1f:88:56:b6:27:
d9:74:26:7b:f7:df:f8:25:70:44:0e:df:00:f8:a5:20:32:b2:
54:70:25:9c:fb:7c:b7:99:36:a8:3f:9d:6d:09:ad:3f:0d:47:
55:5c:7e:d1:bf:82:9a:ed:30:99:e9:02:bf:66:f7:03:7f:1f:
b0:ab:1a:9d:6d:e8:d6:fc:c2:4f:b0:2d:62:9a:59:c2:e4:dc:
97:36:fb:04:95:78:2f:f4:25:a0:5c:3a:dd:78:a7:ed:36:98:
1c:8c:94:02:a7:3c:3f:fe:f4:af:c5:33:18:db:0c:cc:72:67:
81:b4:93:66:3b:7a:20:5a:07:9a:31:c2:a0:64:df:6a:a1:1a:
26:f1:e9:a5:e2:ea:cb:c3:60:64:de:dc:cb:6c:66:a9:95:64:
d0:90:08:51:b8:ae:ff:7f:81:32:b7:b2:a8:c2:73:11:b2:92:
ae:54:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:14:01 2024 by rpki-client on console-fra.rpki-client.org