Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.cer (raw, json)
Hash identifier: xI+Y4Fdh8K1UECgVWN5pLS5jLcWe9IrG2uvOFbk/pBg=
Subject key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA295CBD11570E7886B021328CA5C339
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62044
IP: 87.58.64.0/18
IP: 147.161.128.0/17
IP: 185.46.212.0/22
IP: 194.9.96.0 -- 194.9.116.255
IP: 2a03:eec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:5c:bd:11:57:0e:78:86:b0:21:32:8c:a5:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:99:16:f6:6e:c6:5b:2a:aa:6e:9c:20:c9:
19:4c:68:68:52:40:02:3f:24:a0:69:ce:af:5d:6a:
97:23:6b:b4:b6:3f:62:c5:0c:f6:36:fc:c7:e9:13:
e4:2c:fa:20:38:e5:fb:96:55:59:48:bd:08:99:28:
7b:ab:1d:ff:6d:53:98:cf:c2:10:ea:74:98:92:c4:
e1:84:c0:c4:0e:46:d3:32:b7:1d:1c:4b:a3:22:35:
6c:be:ef:a4:3b:36:9a:ba:d4:d3:4a:49:8b:6a:5b:
00:83:98:28:cb:cd:42:27:35:d3:ea:05:98:76:70:
79:73:e4:37:c5:35:d8:6b:54:5f:04:14:c1:ad:4e:
d8:ba:44:5e:ce:c7:46:89:0f:ad:1f:b7:2b:48:08:
c8:40:b7:af:77:6d:36:f6:ab:4d:aa:48:8b:b7:b4:
3f:3a:86:39:bf:34:a9:74:ec:99:ba:b0:dc:37:52:
67:b4:b1:e9:7d:29:1d:1c:13:3f:a7:89:8a:7d:e3:
17:f5:db:54:e9:72:6d:89:e9:68:b3:58:1b:39:0d:
90:37:4d:66:9a:92:85:95:9d:cf:6d:1a:1d:7b:9a:
60:34:9c:41:6d:bf:84:96:17:cc:e2:36:4f:8c:54:
b3:81:29:be:11:7c:a1:ba:ea:54:1d:c3:9b:a4:20:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/18
147.161.128.0/17
185.46.212.0/22
194.9.96.0-194.9.116.255
IPv6:
2a03:eec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62044
Signature Algorithm: sha256WithRSAEncryption
33:d3:18:d7:8d:59:1c:41:ce:13:8a:8d:2f:8c:b5:51:c1:d9:
13:9f:bd:69:31:24:0d:fe:47:5c:8a:41:12:65:89:c7:80:a3:
b7:e9:a4:1a:71:2e:b9:25:c1:fe:2a:da:88:7d:f6:10:4a:be:
a0:8d:fa:f9:f5:ec:e0:b1:50:88:54:5e:e7:e1:fa:b8:14:d6:
ca:2c:16:04:9c:08:75:02:5c:b0:e9:60:19:96:86:7f:56:cf:
c8:41:e9:ba:8a:6e:fd:19:60:f4:6b:6c:d3:29:98:a3:ba:0e:
30:aa:3c:f1:b7:97:ea:77:53:42:43:74:2b:ed:1b:45:ad:fc:
56:f3:1d:c6:34:a5:50:f2:2b:db:4c:3f:34:14:9f:a0:73:7c:
03:ce:4a:bf:12:08:14:a5:fc:c3:98:9a:55:af:b7:b3:8d:d9:
85:9e:72:7f:42:2a:85:8f:2b:03:eb:10:84:e7:cf:d6:54:c6:
ed:68:f4:95:2f:7c:dc:96:d7:ca:50:57:7d:d5:61:5a:d8:c7:
ad:f5:bd:03:45:1a:e3:90:25:c5:b4:82:f8:a7:f0:db:2d:c3:
48:cd:df:2e:0d:18:54:bb:82:fe:17:c8:34:5e:73:a4:16:35:
72:8d:eb:9e:ea:e1:e3:f7:a2:78:68:dc:c8:21:cf:bd:aa:e4:
12:d7:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:31 2024 by rpki-client on console-fra.rpki-client.org