Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
File: kfWJGibPpDaiPn4f-XZki-5573c.cer (raw, json)
Hash identifier: w/2f516WY3dxJ29YsLhVpcGoA++uE9Xtt0ovjQpGLGI=
Subject key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87042BCC2EEE3D47EE004599F5BCB05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203108
IP: 185.144.220.0/22
IP: 2a07:5b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:42:bc:c2:ee:e3:d4:7e:e0:04:59:9f:5b:cb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:1c:e7:3f:ab:31:d2:c4:48:5b:a2:5d:77:
eb:84:5d:d0:f0:5f:d1:8d:17:9a:4d:56:42:2b:2f:
2f:ed:31:c6:45:bf:d5:76:76:d8:aa:16:8f:90:88:
ba:3a:9a:08:c4:52:b0:5a:1d:58:c1:6b:ce:dc:14:
fa:c0:f9:a0:b1:10:25:8c:e9:b6:47:6c:1e:0d:75:
54:f8:ba:6c:08:89:aa:9f:e6:ea:ad:12:12:72:10:
9b:f6:26:32:c6:f1:f6:67:ac:f8:51:c9:f1:e6:11:
1d:ee:6b:68:8e:1d:37:48:73:08:03:8e:6f:7a:4b:
87:da:21:7a:08:77:5e:de:6e:24:e4:b1:c1:22:3b:
7a:1b:2b:71:5f:52:e1:66:86:b6:c8:cc:2a:d8:ae:
7c:0c:95:99:e2:a3:06:85:78:17:2e:b7:5c:10:47:
82:af:87:c8:53:80:13:74:8f:ee:5b:b4:fc:17:bb:
41:71:be:79:10:11:34:8c:8c:54:97:68:af:8e:2a:
ba:6a:18:bb:bf:1a:a9:01:ca:64:06:a0:bf:34:db:
02:14:11:ec:e0:1b:da:26:af:f2:11:3a:e0:f8:be:
9a:c9:f8:3a:20:b6:b3:6f:e4:6e:82:60:9d:0b:94:
64:d9:30:33:1f:54:a9:27:d8:c3:75:89:30:65:42:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.220.0/22
IPv6:
2a07:5b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203108
Signature Algorithm: sha256WithRSAEncryption
2d:c0:f1:1b:27:38:fb:1d:b8:28:1e:f7:5a:13:7a:ca:fa:fa:
bd:e4:73:e9:d8:12:45:8d:4b:cd:c5:bb:9f:63:55:f6:fb:9d:
a1:00:a1:1f:08:88:20:5e:96:48:fb:51:01:35:60:f5:43:d3:
37:38:06:bd:b4:95:98:ba:68:59:60:22:df:6b:54:34:8c:18:
29:ad:1f:c2:ac:1c:91:de:f9:42:47:3e:59:03:74:54:61:28:
96:4d:cc:a8:2e:39:ad:52:72:8c:4c:91:85:11:51:33:25:ce:
2c:a3:0c:f4:f6:86:3e:40:26:1b:99:46:11:ac:e0:60:5d:6c:
97:2d:1e:c9:17:23:99:86:0b:0c:1d:e4:19:5b:b4:c8:d9:c5:
aa:ea:5c:67:05:27:4f:4d:f9:b5:7a:1a:0e:27:db:cf:43:f7:
ed:55:71:64:ee:2c:6f:f3:cc:c3:7f:2c:9f:0a:40:fb:e5:7b:
39:7d:a9:d7:c2:cb:ad:41:0b:c5:a5:27:b5:3e:d8:a0:2c:59:
1c:19:0a:d6:14:6c:6c:dd:77:5a:79:17:f1:23:c3:00:fd:74:
73:3b:c0:91:ba:6d:2e:b2:e7:1f:81:d4:24:12:9c:14:19:f0:
a0:a5:da:5a:99:9b:c6:f0:6d:81:69:6e:44:38:83:0e:2c:22:
47:14:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:55:08 2024 by rpki-client on console-fra.rpki-client.org