Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer (raw, json)
Hash identifier: AeBsw+FjnDiJ7PYxiT/c0JmLnLsT2bIzObT6ijINyXY=
Subject key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F193D0FE6AA52A0D703AC9767FB1E25BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Apr 2024 07:09:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15595
AS: 44078
IP: 46.37.192.0/19
IP: 79.135.192.0/19
IP: 81.25.224.0/20
IP: 185.191.80.0/22
IP: 185.191.112.0/22
IP: 2a02:d300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:3d:0f:e6:aa:52:a0:d7:03:ac:97:67:fb:1e:25:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 26 07:09:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:85:c1:1e:5b:5a:44:a8:7e:ed:c1:4e:52:
84:22:a8:cf:e0:e2:73:b8:51:6e:34:f0:b4:0a:92:
a9:1d:0a:b9:51:a3:b0:80:7d:f9:e9:38:00:03:de:
fa:d1:1a:4c:61:b4:44:de:49:4f:54:f6:be:3f:7a:
07:dd:6e:fd:79:22:7c:6c:4e:31:17:29:fb:fe:43:
12:00:44:9b:8f:d3:1e:0a:59:98:c2:53:df:45:6e:
f7:04:25:95:2c:4c:ee:e9:dc:90:89:4a:b3:b1:de:
99:ee:10:c0:c8:4b:4f:95:06:89:68:79:62:09:7c:
81:41:15:bc:95:02:e0:5c:78:c9:f4:60:a7:d8:ca:
b7:cf:d9:75:69:41:f6:02:6f:61:00:90:90:fd:d1:
8b:f9:da:5b:8d:72:67:d4:b5:ad:65:bc:0d:00:d3:
ff:76:f6:72:93:18:ad:e5:99:79:e3:d9:cf:34:ce:
32:37:f3:64:07:be:17:b5:d8:58:21:20:93:d4:a5:
bd:b0:23:2c:91:56:cd:ee:24:a1:45:4f:28:ab:41:
0f:79:20:74:d6:dd:50:21:f4:48:61:b4:97:3c:98:
11:f4:0d:6c:8f:c2:70:90:d9:78:b9:24:52:05:2f:
5d:cb:67:f9:fb:d6:1a:32:fd:67:f8:46:d8:ab:af:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.192.0/19
79.135.192.0/19
81.25.224.0/20
185.191.80.0/22
185.191.112.0/22
IPv6:
2a02:d300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15595
44078
Signature Algorithm: sha256WithRSAEncryption
85:f0:8b:5e:6c:b9:77:8b:45:08:b5:bb:92:b7:69:74:1e:82:
c4:59:b3:1e:1f:d0:92:1c:91:3a:e8:79:f2:8e:fe:20:0b:1e:
38:87:10:b7:7c:67:7f:92:d3:54:f7:8c:a6:ed:bb:28:5e:54:
16:5f:6d:a2:db:6e:a9:a6:5b:5c:a0:5f:20:76:55:af:c0:b9:
86:ef:05:11:8a:6c:e5:ac:3e:28:d7:40:0f:f9:b0:3e:75:a4:
a1:03:e9:3f:3c:64:fc:c9:1a:7b:80:6b:35:84:c4:1a:50:4c:
e2:4c:d8:d8:6a:a2:29:cc:e8:bf:44:1d:c4:78:ae:08:f4:97:
8a:98:c6:62:a4:7c:5e:dd:bb:11:38:6a:0e:03:5f:64:e4:ab:
ff:5a:90:77:69:8c:34:37:3c:91:57:9a:fc:20:46:d6:89:3f:
1a:78:65:e8:77:8b:dc:c0:5d:a2:a0:9c:15:d5:81:b7:54:c8:
36:1f:90:a2:e3:54:e2:48:2d:5f:fe:ea:2d:7e:dc:74:ef:1c:
f2:92:52:ac:c5:e3:0d:72:2e:d2:db:53:2a:d0:52:1a:4c:e0:
27:ad:0c:08:d9:d7:39:c2:f8:da:2a:4c:de:2c:4d:2b:d3:1d:
5b:4c:24:81:f3:37:be:76:4f:c6:ca:d0:13:fc:3e:da:40:4a:
df:ad:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:54:46 2024 by rpki-client on console-fra.rpki-client.org