Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
File: kRbcv3jGLVHakHag0Gra027jt1U.cer (raw, json)
Hash identifier: OFNGSgKvu8Q1qksXZ8z6oJdiMS0hgX5SXqNwhJsuMVU=
Subject key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E1B7D5616A6EFBD94C7E6F1128B48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43272
IP: 77.247.248.0/21
IP: 185.177.28.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1b:7d:56:16:a6:ef:bd:94:c7:e6:f1:12:8b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:a2:c6:81:1a:88:94:e2:85:7a:81:1e:cf:
ab:26:e0:aa:77:ad:bf:eb:4a:63:f8:da:8b:8d:86:
7b:d7:a7:50:51:0e:e8:c7:db:e5:13:97:7a:2b:06:
79:5f:70:78:e3:c7:e4:0b:ae:be:d7:73:bc:de:8f:
de:18:45:d8:31:0f:4e:1d:d5:50:a5:44:70:28:16:
ac:b8:33:90:41:6c:d2:37:1d:11:6e:96:b9:bd:7e:
ff:04:fe:5a:6e:d1:5d:aa:df:bc:06:ca:7a:fb:25:
04:49:3f:8d:e7:25:75:f6:0a:54:d7:eb:9c:52:ed:
64:6d:59:63:cc:b7:45:e8:8f:6b:0c:65:95:df:24:
87:58:c0:82:d2:d1:0f:3a:65:53:cb:e2:89:93:2e:
63:f9:44:30:db:1f:23:7d:8a:f7:f2:31:db:d5:8e:
9f:eb:ca:43:e0:d5:d0:90:31:0f:35:df:f5:90:a4:
4d:d0:84:c8:33:89:72:d2:3e:44:e0:8b:d1:8b:8d:
89:fd:ec:d0:a1:ec:d3:30:4c:76:4e:47:4d:df:7a:
1b:ae:13:ee:8c:51:fd:d2:8e:24:44:f9:95:62:b0:
de:34:e3:d4:7a:d1:75:b8:45:b4:15:ea:53:ef:10:
cf:ae:19:e3:e1:92:ff:d0:9e:dd:a1:4f:f2:19:e3:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.248.0/21
185.177.28.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43272
Signature Algorithm: sha256WithRSAEncryption
82:36:79:89:c2:61:36:53:5b:15:01:ae:d0:85:e3:9d:73:20:
5a:c8:d6:68:20:e5:64:d1:74:e9:81:e5:e1:00:15:9d:42:1f:
d0:ed:e1:1d:73:27:61:47:6e:6b:97:95:d3:25:b1:74:55:62:
c2:3c:6b:e5:19:4c:84:f8:85:4f:7c:94:3f:71:b6:f4:6e:c1:
68:02:33:62:a6:40:29:99:d5:be:2f:40:8d:bd:1f:29:82:f8:
c2:d1:0e:5b:6e:03:92:50:62:c4:75:b6:32:e1:5b:5f:7a:7f:
24:32:41:3d:80:c4:88:61:27:f2:fa:65:24:35:e3:34:ec:f0:
5a:ef:ec:fc:91:7a:68:d5:bb:80:fb:17:9d:44:a5:11:f8:25:
f6:6b:a9:66:dc:ed:c5:ce:0e:da:71:c7:b6:d4:f4:2b:bb:78:
eb:cf:74:70:d0:3f:47:2d:c9:da:87:2e:eb:36:ba:bf:9a:63:
8f:4a:36:e3:d4:2e:09:2d:ac:6e:c4:1d:22:4b:9c:71:cf:60:
db:36:ff:63:1c:03:d8:2f:e7:3c:8c:86:2b:63:af:9e:60:b9:
65:18:74:9f:76:35:fd:7a:b5:02:df:05:ef:d3:f1:cd:34:f7:
f6:ca:8c:1d:00:43:fa:8f:95:71:5c:be:5d:4f:fd:7d:0f:30:
48:fb:ac:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:40 2024 by rpki-client on console-fra.rpki-client.org