Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
File: rtyPMnpGGWTAqHqceAlAHFfIbUE.cer (raw, json)
Hash identifier: ebJd2JBXozmCbldXTNLZLHWx/Ajr0DLZaZLkgaFe1yY=
Subject key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72B58E65BC94B71288C57ADE0B91E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61189
IP: 85.194.200.0/22
IP: 185.7.252.0/22
IP: 2a03:29c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2b:58:e6:5b:c9:4b:71:28:8c:57:ad:e0:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:da:02:7d:3c:45:8f:45:cd:52:28:a2:8d:
29:6b:1a:3f:ff:91:7c:b0:b9:5e:b3:47:33:35:16:
c4:42:dd:6a:dc:1f:49:ab:cd:ff:f6:74:1d:a7:63:
0b:cb:f3:03:44:48:71:88:9a:70:57:36:4c:4b:0e:
f3:ed:4a:21:18:2a:f3:aa:fb:fa:f8:c2:6c:54:cb:
36:b8:43:dc:02:e7:df:fc:42:3a:43:d2:92:76:71:
04:3c:8d:6f:62:b6:7a:81:88:9d:0f:ac:45:8a:50:
b3:33:f2:02:5a:08:dc:f7:11:ac:26:a9:54:a3:d7:
42:43:83:14:a3:fd:06:68:0d:a9:5a:d8:34:46:d2:
69:ab:7b:cc:d0:10:0a:d6:85:22:fe:7f:a9:af:07:
45:92:1f:1b:6e:e2:ce:dc:37:8f:3e:a6:e4:43:fb:
0a:a8:ce:25:29:3b:7d:f9:fe:15:1a:03:92:b4:e8:
81:e1:01:74:c4:d1:7f:15:75:ef:f3:e0:95:53:42:
67:01:16:99:83:84:28:6e:9e:dd:82:54:7d:95:ae:
c5:37:b9:94:a5:81:00:72:bd:01:fe:84:47:76:d4:
a1:ed:4a:fd:1c:8e:cd:1b:8c:b9:03:6c:cf:d8:e5:
2c:fd:be:d2:3f:7a:ea:c0:90:59:33:82:e7:b5:3f:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.200.0/22
185.7.252.0/22
IPv6:
2a03:29c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61189
Signature Algorithm: sha256WithRSAEncryption
7b:5c:51:ec:0b:6a:1c:dc:51:4e:cd:42:89:0a:0f:f6:d4:8a:
8f:ac:61:0c:06:92:bf:d6:6d:6e:73:e8:4d:49:40:ce:10:ef:
02:78:08:20:54:19:55:76:18:c9:c7:a2:50:5a:2e:31:c7:fa:
0f:c3:7d:85:f3:a4:80:d2:25:25:fa:b2:9a:55:0d:8c:29:1a:
02:8d:03:e6:ec:da:6e:68:5e:45:22:d1:6d:8f:5e:88:69:78:
79:89:47:ee:0b:34:2e:c8:f6:32:de:f4:d5:40:48:e1:d7:63:
d3:59:12:40:c2:2b:2b:88:bc:eb:a5:26:b6:4e:55:79:dd:3a:
fd:93:63:03:a4:de:bf:58:14:27:2e:e7:75:65:7e:e4:31:95:
9c:68:fc:6c:b0:87:86:14:c5:6e:19:c0:33:2f:44:77:d0:40:
53:da:cf:55:00:fa:df:1f:06:0d:2c:e4:0d:08:e5:32:0f:d2:
b9:5e:b3:2a:5c:65:82:fe:6a:3f:ac:6c:b3:a2:05:26:07:e4:
fa:89:ed:f7:85:ed:6d:15:c9:6f:5c:eb:dd:05:c5:a6:ea:07:
67:7e:10:f5:95:4e:98:f6:4f:c3:a4:df:b9:dc:8b:92:f7:e6:
b6:8e:08:58:da:d6:03:ee:ca:78:5d:cf:1f:cf:6e:12:29:06:
7b:7e:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:46:04 2024 by rpki-client on console-fra.rpki-client.org