Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer (raw, json)
Hash identifier: NiY4tTAxz60RXBqyglOnNv7M2LoPubl9APdHruAR7WQ=
Subject key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AF3158A1D9A0F1D80454946A60BCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39790
IP: 81.91.80.0/20
IP: 185.14.224.0/22
IP: 2001:1568::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f3:15:8a:1d:9a:0f:1d:80:45:49:46:a6:0b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:38:84:ee:ad:66:5b:1c:8b:bb:ef:98:5c:
ba:5f:93:51:cf:e8:ad:ec:59:a2:1e:72:19:14:dd:
2a:fa:1d:b1:11:7f:35:72:52:91:e7:1f:2c:b9:73:
97:80:44:f3:68:c0:53:55:8e:f8:a4:85:05:7d:93:
69:f0:98:62:98:18:ed:16:9f:1e:63:4e:64:4c:4e:
83:b5:f3:bd:cf:eb:bb:e6:6e:fe:54:08:fe:f9:12:
52:ed:c4:80:00:16:9c:f9:48:55:42:0b:36:d1:58:
f3:d4:a1:ac:bb:e1:2b:50:02:3d:b2:2f:b4:54:d6:
22:ab:45:a9:f0:18:8f:f6:e7:e8:52:62:ac:d7:67:
8b:10:1d:2e:6a:a9:53:a6:5a:11:c2:06:1a:8a:57:
f7:9e:81:12:2c:af:87:cd:7b:db:28:8d:fd:54:bc:
32:69:a1:59:9f:1b:09:ac:08:b3:75:31:51:3f:8d:
e4:04:1a:6d:b2:a2:20:2c:67:db:76:55:e7:e8:a4:
1d:c2:48:9a:f6:af:9e:8a:f3:9c:20:73:3d:ae:37:
37:1d:70:97:a8:d8:b2:a9:e2:ba:e1:f4:47:f3:d6:
cb:e1:b1:0c:48:24:26:c9:30:43:c7:78:6b:9b:13:
be:08:07:4e:23:99:48:d6:29:8f:50:3b:53:b9:85:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.80.0/20
185.14.224.0/22
IPv6:
2001:1568::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39790
Signature Algorithm: sha256WithRSAEncryption
39:2a:c1:a1:60:22:23:25:91:7b:10:d7:71:2c:ac:2d:9c:dc:
14:fe:d5:82:03:18:25:88:9f:5e:ba:24:cd:ff:11:32:38:5b:
4c:69:10:4c:3a:d4:bb:6e:a8:b3:33:54:d9:6d:ea:aa:f1:5e:
4f:b3:08:c9:34:ff:99:66:00:6b:45:c7:96:8c:f8:b3:01:49:
f3:f3:02:8f:ca:4d:c4:45:4c:c6:dd:28:54:a6:94:da:94:32:
15:2f:9e:41:ba:a0:ab:c9:c4:10:b8:88:90:6b:50:1f:29:08:
40:68:0a:2a:a1:ef:94:b3:05:aa:e2:86:a9:cc:28:ae:d6:ae:
d8:5b:9f:b1:1d:32:8e:fa:b7:a7:99:33:e9:f5:76:d8:a0:7f:
58:3d:3f:7a:4b:5e:75:45:45:1a:43:d1:d9:28:76:b8:74:69:
20:95:0f:11:bf:eb:01:a0:f7:bb:10:54:58:aa:42:ba:50:32:
46:16:7d:e6:a0:6c:0e:19:93:47:61:f8:95:28:6f:bb:fe:6a:
78:6b:aa:bd:0b:a2:4a:c1:93:19:59:ca:eb:f2:ac:21:c1:3c:
22:de:c1:97:78:ee:29:58:9d:e0:3f:57:cd:19:5d:59:c5:fc:
cb:65:3d:f5:b1:94:d5:09:5e:de:62:d2:51:ae:7a:cc:67:2f:
d8:64:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:20:19 2024 by rpki-client on console-fra.rpki-client.org