Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.cer (raw, json)
Hash identifier: kgKjzv3jB/RtFw1qAzmm9dDA93R4/jMbPHftTGUfQ+8=
Subject key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7953731A28BBCB448F340F5E166AA1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206466
IP: 185.185.236.0/22
IP: 2a0b:6880::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:37:31:a2:8b:bc:b4:48:f3:40:f5:e1:66:aa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afef3844293bad651ffd857c91af0be560aecd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:87:86:46:f6:ab:e8:b2:16:06:67:30:99:
ee:e0:77:6b:de:5e:66:5b:1a:60:01:d3:cd:1f:41:
12:f0:e5:3f:4d:81:f4:c7:be:06:cf:37:b8:23:1c:
18:37:37:6d:66:46:86:da:02:00:c4:0f:cd:8a:07:
51:b4:98:96:4c:ea:55:f5:de:d2:77:a1:65:f4:99:
dc:21:03:48:af:57:19:af:5f:f0:e9:a4:1b:76:8b:
46:6a:d5:d1:76:b2:ea:59:77:e3:5a:ed:bc:a2:2e:
7c:b9:02:f2:62:4b:ec:11:b0:ae:f9:0d:59:8d:86:
fd:ad:0d:83:29:b0:28:6f:33:e4:4d:9c:f0:65:93:
b6:57:56:04:d8:b4:a3:30:92:34:36:24:0e:af:a4:
1d:68:05:4a:a8:5e:c7:c1:6c:ef:9a:02:68:f0:03:
59:90:e7:3c:de:bd:6c:c6:de:73:25:aa:2f:b0:1a:
ff:a6:0d:47:12:0f:1c:5a:a0:7f:7d:c1:50:f7:0b:
ad:91:0a:73:87:29:70:57:80:94:19:b7:ae:99:b1:
03:23:d2:9f:5d:f7:b8:3b:8c:a9:c3:07:90:a6:60:
38:8a:29:2a:70:6c:0a:96:0d:ea:eb:2b:0d:09:a1:
fe:1d:7c:a9:09:39:d0:36:0f:a2:2c:11:59:b3:1f:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.236.0/22
IPv6:
2a0b:6880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206466
Signature Algorithm: sha256WithRSAEncryption
56:62:d2:46:9f:94:18:ee:57:ef:d5:26:76:a9:6a:81:9e:9e:
d8:5c:fc:9a:86:3f:6a:32:ce:ea:c8:1a:40:0b:f3:54:76:56:
06:3f:14:5f:21:b8:47:06:2c:ac:c1:de:10:05:7d:60:53:c1:
94:97:2c:9b:39:08:e7:b6:ff:b1:b4:6f:31:c8:d2:35:32:b7:
f3:1d:fc:08:7c:61:b8:55:04:2a:22:59:48:b1:d9:e8:5e:b7:
8b:e4:e6:fe:3b:4e:dd:2c:12:c6:51:0e:03:7d:35:8c:c8:ac:
15:e0:e1:f2:02:25:24:58:93:c3:a8:7e:c1:03:20:9d:1a:40:
db:e2:c5:39:0e:ff:76:b2:61:31:07:08:30:c0:4c:52:cc:1f:
17:81:95:98:23:00:ef:f8:14:14:12:b4:42:52:86:5b:e1:49:
2c:6c:4b:d3:58:2b:0c:c7:b0:45:89:34:37:85:3c:e3:18:9d:
82:f1:6b:45:56:61:81:b3:62:10:69:20:f0:f0:e4:fe:2e:d1:
de:08:f2:5d:b8:e4:e6:6e:8e:1b:57:69:32:ca:6c:c3:13:7e:
23:c8:44:96:29:08:16:86:df:4e:58:1b:7e:0e:9c:b8:23:49:
a4:fb:6f:e9:7c:9e:69:79:9b:5d:fe:0d:e4:cd:3b:26:a2:04:
cb:72:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:04:03 2024 by rpki-client on console-ams.rpki-client.org