Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
File: kZvynhrKI6UV4R9mlgtOuVyAz7k.cer (raw, json)
Hash identifier: CkKOwTITNLvER8abQ5zFUrkOU7FT/t8wQ5VBAYYPJYQ=
Subject key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF5314C9E187C315C685CD28C4D0888
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 42694
AS: 205835
AS: 205911
AS: 206017
AS: 206068
IP: 185.51.120.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 May 2023 06:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:31:4c:9e:18:7c:31:5c:68:5c:d2:8c:4d:08:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:0f:b5:d3:3f:df:c2:e0:23:4d:d2:f3:13:
11:36:d8:18:a7:53:23:2e:5e:66:3d:7d:ee:90:fb:
22:bd:13:9f:0a:4e:35:28:93:45:5c:3a:2f:c1:c4:
be:3f:76:b4:61:c2:94:fe:23:bd:d3:24:3c:16:e7:
97:05:85:b4:6f:e0:4f:b6:99:25:a4:25:77:43:09:
ab:28:02:1d:bf:f9:7c:15:d0:cc:de:fc:ab:5a:62:
ca:60:b5:d9:19:e3:05:be:2b:97:b8:cb:23:b9:52:
73:74:8b:aa:b0:55:c9:76:35:49:77:19:5d:72:95:
30:a6:21:5b:26:1a:11:7e:f4:0a:75:e9:bd:43:1d:
bd:38:6f:f0:a9:5a:3b:36:61:e6:69:55:4c:4f:7f:
90:6a:19:9e:9d:35:84:d6:2a:2b:f7:4c:04:48:6e:
66:b7:47:1f:11:1c:34:b4:c5:95:c8:5c:b6:af:11:
f5:11:d9:d0:a7:e3:5b:2d:ca:71:8a:10:44:dc:2f:
f2:fc:70:28:e9:27:a2:a3:dc:fe:01:7a:04:72:69:
17:d2:bd:9d:51:69:76:4b:a5:e6:83:0e:0c:6e:90:
95:b5:ab:69:cb:0d:f0:44:8d:7d:fa:43:85:6c:06:
0e:ba:a5:5e:06:ca:1d:7f:98:ae:89:ee:8a:91:b3:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42694
205835
205911
206017
206068
Signature Algorithm: sha256WithRSAEncryption
9f:e3:16:46:9d:d6:b0:b6:74:89:ae:32:b5:52:24:25:18:66:
8e:0d:61:95:f8:8e:b7:02:27:0d:92:b4:06:7a:31:38:57:3d:
39:11:58:0f:8c:ab:49:2a:e6:94:82:8c:35:72:a5:7a:6f:3c:
d1:a0:5f:d0:60:0e:45:c4:3a:6d:b9:4a:3f:c7:01:b0:88:51:
00:c0:13:f5:b6:a2:ea:6a:72:b5:22:90:07:45:2b:9c:e6:89:
22:8f:a2:d2:d6:38:bd:5b:0c:4a:3a:40:b2:e7:74:e8:51:54:
5b:52:40:61:cf:80:53:5a:4d:7c:60:49:9a:dd:9e:d1:5b:26:
ed:b4:51:8c:fd:c3:1f:a6:8e:63:22:e0:ed:f4:ed:29:54:c2:
88:38:58:1a:24:99:42:08:f0:73:1b:9e:ac:c2:f6:bb:2b:d9:
59:81:4e:e4:a5:9b:ba:43:2a:f0:43:0c:95:a6:f7:44:d7:e5:
1a:4e:84:ff:81:35:b7:a9:05:37:98:00:36:af:2b:4b:44:37:
d6:60:da:14:8e:0f:ba:34:77:02:fc:f8:98:d0:3a:8d:02:f5:
8c:d5:4f:bf:fe:21:7a:77:b4:3a:46:65:05:9e:01:85:8a:3e:
8d:05:f6:42:14:22:f0:d9:4d:de:51:44:65:57:71:3e:f0:58:
11:f5:b2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 3 14:53:23 2023 by rpki-client on console-ams.rpki-client.org