Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s1IytLD6jIPU_4wSROhk67yt1os.cer
File: s1IytLD6jIPU_4wSROhk67yt1os.cer (raw, json)
Hash identifier: TobFb8fLX2J4P0QHygdhnVhK58zy1RzsO0FrgGpnLm0=
Subject key identifier: B3:52:32:B4:B0:FA:8C:83:D4:FF:8C:12:44:E8:64:EB:BC:AD:D6:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA296530FFEDF41CF6C3572E10788BAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58104
IP: 45.158.120.0/22
IP: 2a0f:6180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:65:30:ff:ed:f4:1c:f6:c3:57:2e:10:78:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b35232b4b0fa8c83d4ff8c1244e864ebbcadd68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:a5:86:22:51:c0:24:24:0d:83:d7:51:ef:
49:73:aa:81:26:b5:f2:1f:fa:20:f1:a1:87:73:9c:
68:5a:33:dd:31:df:e3:5d:84:91:f6:02:94:9c:37:
21:6e:b0:7d:d7:64:d4:e3:9d:03:2b:8c:1a:0a:28:
53:f4:c9:df:98:25:a0:61:47:5a:55:13:31:91:07:
70:83:3a:c4:8b:1e:ee:15:8b:ee:f6:f0:59:47:78:
72:d3:a3:9c:2e:9a:75:d0:3a:91:e3:10:99:c9:59:
5f:ce:70:8a:99:fe:c2:76:df:66:ca:fd:c5:3c:e2:
67:a7:86:33:ab:22:c8:c0:c7:87:84:15:c0:97:75:
5d:93:23:bc:2a:62:67:c2:f7:de:6b:6b:da:94:f8:
94:f3:e4:6a:d1:61:c3:56:b7:9d:1e:7b:42:80:95:
14:40:db:d8:e4:b1:58:19:da:dc:e7:a5:96:29:69:
ea:4e:47:a6:0c:50:d1:3e:11:97:62:6e:06:f2:5c:
d5:41:6f:77:b9:01:ee:b4:52:5f:da:f8:01:0b:20:
43:02:18:85:ce:d4:8d:24:fb:ed:4e:a2:a1:0c:ef:
eb:b6:1a:27:8e:64:b6:03:7b:44:af:89:a2:13:67:
37:7c:1c:94:5a:3d:79:76:c9:d8:77:58:58:fb:4b:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:32:B4:B0:FA:8C:83:D4:FF:8C:12:44:E8:64:EB:BC:AD:D6:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.120.0/22
IPv6:
2a0f:6180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58104
Signature Algorithm: sha256WithRSAEncryption
38:7c:d8:50:3e:9d:eb:b8:46:6c:17:5f:a4:91:6b:90:06:df:
dd:b9:a6:ec:c9:15:69:e8:c2:1c:7c:4b:5c:3a:64:52:d0:ef:
98:0d:3d:96:36:21:3e:fd:72:78:22:80:51:32:7f:00:00:5c:
3b:fd:7d:64:fd:6d:e3:1f:3b:98:13:da:0b:db:0a:4b:6c:ab:
31:53:bd:91:9c:21:5e:2b:a6:88:e4:3c:ff:ff:54:13:62:78:
c8:62:89:2d:75:cf:ce:46:44:81:e4:80:db:5f:43:a8:2d:14:
03:c7:6b:0c:8f:ea:aa:7e:ac:04:f6:32:a7:f5:42:2d:fa:d3:
ff:68:29:27:43:7e:97:3f:53:1f:91:82:a6:9c:fb:dc:6d:8a:
11:62:32:6e:84:74:47:28:11:b0:b2:32:1a:ac:c6:e3:28:a0:
87:40:9d:1b:f4:b2:d9:ed:3f:17:a1:6b:87:94:fe:7e:5f:76:
cc:c2:80:5f:6f:ba:3a:76:96:05:40:c0:cb:b4:42:66:19:9b:
87:2a:4b:51:85:33:2c:21:eb:b6:6e:e5:8a:42:01:24:d7:47:
c9:c1:ba:06:21:ac:62:97:bb:5b:48:8c:af:00:eb:b7:94:ed:
08:0b:e0:26:e0:e7:03:08:32:a6:e6:ec:51:5e:3e:e5:2d:35:
74:26:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:38:57 2024 by rpki-client on console-ams.rpki-client.org