Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer (raw, json)
Hash identifier: hh+z3smTa5xVKyQXI/UAaL6Tx/nDbleB/Zc09P7qZVU=
Subject key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DEB0ED417634928DDBF4EC0C71703
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 30754
IP: 217.71.144.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:eb:0e:d4:17:63:49:28:dd:bf:4e:c0:c7:17:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91362d3c0953e8c933f0092a589b75494904f962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:6d:50:d0:6e:47:bc:17:c8:c0:f5:64:45:
ac:e7:8b:47:f3:78:1c:75:21:89:96:a5:e1:dc:1a:
05:56:67:fc:16:65:eb:30:85:b8:b5:d0:be:d5:06:
87:ba:57:86:aa:9a:24:03:1a:34:20:5a:aa:df:07:
19:73:f4:f8:9b:88:fb:61:b7:53:f1:ca:02:99:c8:
c4:73:16:6b:64:a2:59:69:eb:02:c5:fd:51:2a:81:
09:54:28:07:44:88:4e:e6:39:2a:81:85:f7:44:45:
52:dd:5a:da:df:35:52:f0:90:6b:7f:cc:7a:f5:9c:
63:ac:e1:4f:fe:68:d6:31:9f:2b:64:07:93:ee:f0:
f2:23:f5:68:bf:78:cb:35:5a:7e:5e:37:01:11:90:
b9:1b:2e:d1:8a:c3:8c:62:c7:30:9b:8e:4c:95:57:
92:75:40:e7:ef:b7:a9:f7:6b:f1:0b:ef:27:e8:dc:
5d:1d:bf:95:a9:6b:6e:cc:bf:8d:c0:7d:88:88:fd:
4d:6b:ee:5f:e4:3e:7e:61:2f:7a:78:c2:c9:85:c2:
a3:64:de:d4:b1:22:4d:d3:a6:5a:e1:48:0b:b0:7f:
17:cb:16:ae:f9:16:be:ba:6c:8a:b1:26:8a:25:da:
c3:48:9c:15:85:42:d0:db:b6:91:ec:40:e0:26:d8:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.71.144.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30754
Signature Algorithm: sha256WithRSAEncryption
92:01:40:0d:52:77:3e:1a:04:7b:64:33:14:be:17:9c:7e:e9:
dc:26:ed:01:65:2a:d3:07:4b:c0:30:61:c7:f7:05:35:fe:e1:
78:bb:f4:fc:c5:c8:2b:fe:1e:8f:1e:cf:d1:51:51:20:76:f5:
e6:26:56:44:e4:7f:bf:ae:16:95:f5:58:48:90:a2:5e:8d:be:
29:0b:62:eb:b6:cf:50:bb:06:9d:3d:f5:9a:ca:32:30:6d:90:
cd:1a:7b:8b:48:e4:64:10:ce:00:c2:8d:e8:db:ed:75:94:5a:
4d:8e:3a:b8:35:65:0e:2e:fa:b4:bc:ad:04:b3:44:f5:d3:18:
9a:e2:2c:5a:55:c3:f7:f8:05:90:c7:8d:41:99:c2:0d:26:3f:
5f:a5:97:93:ae:e3:6b:8c:28:0e:ca:6f:b8:13:8b:5a:53:d6:
f3:57:50:6c:b1:3b:82:40:87:dc:f6:fe:79:50:39:f8:81:d6:
dc:7b:7e:84:bf:14:41:53:fd:72:53:67:96:0c:0f:91:c0:e2:
e6:10:4d:2e:f1:e7:a8:58:43:ef:9e:4c:7d:50:26:ca:b3:7f:
5c:ca:6f:cc:dd:10:c3:85:a5:dc:d9:2b:4b:14:43:75:f9:ec:
7f:fc:29:42:6c:8b:29:b0:9b:18:32:55:8b:23:65:47:6b:d8:
e3:03:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:39:04 2024 by rpki-client on console-fra.rpki-client.org