Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer (raw, json)
Hash identifier: VweIghixjJUzIF3wM+Jt6xuhm/7Vsv01WZPLQvOgsyY=
Subject key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC92CA434FA4271179197305E190E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6707
IP: 193.28.225.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:92:ca:43:4f:a4:27:11:79:19:73:05:e1:90:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93d43d499868091bbdc47d95aee1c9099f005620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:ca:2f:f7:ea:d9:bf:cf:a6:99:ee:a5:1e:
37:a9:b6:80:07:f1:a4:bd:ac:1a:e5:42:4f:f6:1b:
53:10:a1:29:54:f8:35:07:5a:f5:21:a8:fc:97:d3:
d1:9f:78:24:61:61:d0:ad:f2:95:6e:ca:97:10:c1:
e8:ee:25:70:ca:46:79:98:74:be:f0:44:cc:c7:29:
ee:86:56:96:d9:64:6a:82:fd:4d:34:a2:58:0b:0c:
ea:aa:94:55:52:c1:8d:fa:32:e5:b5:ea:ab:02:1d:
63:cf:8f:59:f7:1c:77:a6:f0:3f:6a:9e:a2:e2:f2:
fd:ce:3a:84:ad:d5:4e:34:ec:bb:7d:3d:c5:95:4b:
a3:77:95:ad:d3:ef:89:61:5c:12:47:be:ba:b5:5c:
83:5c:7f:c0:12:06:bd:ed:f2:a3:d8:30:22:a3:b0:
4a:a5:99:88:2c:7d:06:13:2a:bf:e6:34:f4:ea:0b:
68:52:37:76:1f:e5:9c:04:4d:15:95:24:78:7e:b0:
31:df:d9:9f:84:e4:d5:52:e5:13:05:6f:e9:b2:82:
a2:df:0c:1d:76:1a:4b:23:af:29:5b:f0:e5:71:13:
5e:d7:14:78:62:a7:b3:40:da:dc:a7:c1:87:a4:8d:
5f:e5:7c:f5:fe:69:49:82:9a:6c:c5:68:82:3b:6c:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.225.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6707
Signature Algorithm: sha256WithRSAEncryption
7a:a7:ca:0f:13:0e:6e:de:2b:00:ca:30:fa:9b:99:9a:5f:09:
70:71:31:d9:de:6d:73:18:f6:e1:57:39:9d:7b:20:78:fa:6c:
25:6e:a3:e6:d5:ef:d5:ca:55:e5:8d:28:9f:7f:15:f4:4a:33:
26:7e:5e:20:19:25:ad:00:c4:8e:49:c7:14:8c:53:ac:4d:4b:
3f:7e:d0:c5:1d:94:4e:d3:73:be:e1:ef:21:84:7d:46:7d:10:
36:8a:4d:b8:2a:46:37:cf:60:24:ca:d9:e6:bd:7c:fd:cf:45:
5e:69:ce:c6:2f:e7:2f:b1:7d:c3:e3:63:d1:aa:b5:aa:b2:ec:
9a:c6:4e:20:1c:23:f7:75:d0:7a:ca:f7:aa:87:24:de:f8:da:
83:79:70:d5:80:b5:6b:23:98:df:d1:a3:db:18:1a:30:6a:15:
71:03:19:56:fb:92:73:26:e9:50:16:ac:38:ed:56:79:75:11:
8d:ee:71:31:b6:7e:b8:c1:2a:43:23:3f:05:da:4a:f7:d6:5e:
97:e4:64:53:16:0a:98:e7:bf:42:5b:95:69:0c:91:e3:c7:97:
83:bc:ff:6d:17:69:36:ae:fd:b3:02:f2:42:3d:c8:12:35:33:
7c:14:6c:cd:17:4e:08:7f:65:40:6f:3c:d8:29:af:fa:27:9a:
ed:c4:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:27:12 2024 by rpki-client on console-ams.rpki-client.org