Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.cer (raw, json)
Hash identifier: dVtgGf2pkSn0elIn5F7/Kpi341iJdHgAwkPmOR0Q2yI=
Subject key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F755DF4C9C7EBCA133866CE56621E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209093
IP: 5.182.200.0/22
IP: 2a0f:5b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:75:5d:f4:c9:c7:eb:ca:13:38:66:ce:56:62:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9d:e3:84:55:31:ff:7c:cd:ee:be:80:a7:26:
b8:43:f6:72:09:1a:d2:1e:22:28:60:40:47:ba:dd:
4a:90:64:d0:25:a2:f5:3b:95:11:1c:a0:7d:6c:3b:
6b:ef:35:d7:a1:8d:31:e4:aa:b3:4d:08:62:ab:89:
ce:04:b7:71:ed:56:35:00:46:e8:3c:67:09:4a:2e:
f2:da:97:59:b7:74:c5:7c:c7:2d:be:00:dd:57:29:
fe:77:63:08:ff:79:23:66:64:d9:4d:69:d5:d9:54:
55:fb:a2:dc:cf:cf:84:52:67:76:86:f6:b3:d0:84:
f2:4f:8f:38:29:dd:b7:41:c1:c2:96:90:b0:2f:f7:
76:cc:20:78:d2:8e:50:44:ac:22:db:eb:fb:34:09:
b6:43:da:a1:3f:f2:49:d8:07:ce:e1:c4:1b:74:61:
70:3d:ac:48:e1:88:5b:85:04:77:e3:9d:c8:16:fa:
ff:5c:eb:9b:70:c3:bd:54:e8:24:66:19:90:e5:6c:
dd:35:cb:3a:50:61:cf:a3:e1:d3:72:e2:13:ce:e3:
81:4c:3b:df:ea:f4:7e:bf:3f:47:9d:69:49:63:10:
6f:57:56:c0:54:ca:c5:77:64:66:47:ff:98:c6:43:
89:7e:8c:d4:d0:0b:ee:d8:6a:f9:bd:ce:d0:80:99:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.200.0/22
IPv6:
2a0f:5b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209093
Signature Algorithm: sha256WithRSAEncryption
a4:32:e6:72:ca:b4:00:57:0b:b2:77:e5:84:b0:c4:2c:5e:b8:
2f:e2:ed:86:2a:58:cb:6c:00:5e:da:e4:bf:71:1b:10:bd:bf:
34:61:18:85:45:58:20:88:e1:f2:e0:17:36:ba:51:4d:99:96:
07:32:a4:f5:65:9f:ea:34:3b:13:34:8e:7f:d2:bb:44:41:16:
a8:8b:bb:4a:be:a9:5f:a7:ff:6d:5f:cd:a4:f0:a7:c8:4c:ce:
84:80:a8:cd:b9:da:7f:8f:59:7e:e2:b1:33:60:22:a8:02:cf:
b2:98:8f:ae:49:9b:78:ef:12:f6:d5:dc:23:d1:6c:73:53:a6:
e0:07:ac:e7:40:b7:34:27:8a:6f:b4:de:0a:19:56:f2:5a:8d:
9e:5c:ab:bd:31:68:7d:c4:b3:1b:e9:f1:59:86:4a:7f:d5:35:
f6:97:b9:11:48:cd:bf:6d:6c:04:5a:67:d0:52:74:39:0b:3d:
f7:7b:9f:54:08:8c:62:fe:bb:9e:5b:9e:9a:b9:be:10:69:ba:
87:73:8f:b0:f6:76:7b:3d:37:aa:64:b5:dd:60:27:ad:1f:28:
c9:4c:6c:77:b5:32:cc:e6:c1:ac:ab:63:55:2a:0f:26:de:73:
79:2c:8e:98:0c:7c:8e:0a:31:b0:36:48:7c:09:80:71:5a:60:
51:3e:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:40:35 2024 by rpki-client on console-fra.rpki-client.org