Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
File: s6t6iYCGh8w9rXug998LrOAZ92M.cer (raw, json)
Hash identifier: sxSqou2OdHfAMbKnut4r4yrs/lrx2eygmAOofsVkbF0=
Subject key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC177348490EA8BBD24893F5596A31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 33832
IP: 185.99.144.0/22
IP: 2a06:12c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:17:73:48:49:0e:a8:bb:d2:48:93:f5:59:6a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:be:0a:04:39:3b:1c:f5:c6:77:96:0e:4c:
f1:2f:b3:67:06:67:b4:56:7b:22:c6:2c:78:f7:30:
b6:ae:fc:d7:b7:d9:df:f1:9b:e4:43:58:84:95:e1:
83:c3:9d:08:38:17:cb:99:65:d1:eb:fb:e6:0b:ab:
db:82:44:2c:02:26:50:a4:51:3e:4a:c9:d6:b2:5f:
bb:f7:72:c7:63:8a:19:99:ce:1f:d6:0c:91:9e:65:
3a:14:31:fb:1d:f3:ab:2c:1d:bf:05:a1:8c:0a:17:
35:55:8e:0e:c7:7f:c2:a3:5d:b6:ce:c7:62:4e:ed:
eb:9f:54:2d:ee:31:8a:6d:b8:e9:63:31:c5:1d:35:
a4:32:3f:24:42:5e:db:f2:72:2b:8d:fb:bd:fa:b2:
af:e2:c4:ea:75:8e:27:0e:a9:37:08:f0:d9:6f:26:
a3:46:80:e4:01:0a:53:f7:1e:66:30:c0:df:b8:9e:
61:40:36:c7:1c:6e:b6:8e:4a:b9:5c:61:6c:4e:92:
07:23:9a:12:4f:95:7e:78:4f:15:66:df:a6:0a:19:
6e:ad:0c:d8:59:92:dd:6c:45:78:72:bf:35:eb:be:
f9:5c:c3:31:15:99:d1:c7:08:05:c2:f9:52:88:83:
a0:f1:fd:dc:03:f6:50:22:77:10:1e:6b:6f:69:ba:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.144.0/22
IPv6:
2a06:12c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33832
Signature Algorithm: sha256WithRSAEncryption
64:b6:ae:66:85:f5:8d:9e:c2:84:a9:fe:a2:1b:b4:67:1d:11:
be:11:b6:5b:f2:dd:79:9a:25:b7:40:39:a9:3c:9a:cf:82:2e:
7f:33:75:99:35:59:67:71:5c:88:9a:37:35:a0:80:9c:87:a6:
15:cf:48:e7:35:8e:39:4b:d8:44:c3:33:27:98:c8:6d:32:5e:
41:c9:f5:41:c5:f1:92:49:4d:77:73:9d:88:66:79:f1:82:e6:
69:c9:ed:d7:38:95:dd:98:df:bc:f3:fe:59:72:2c:bc:54:29:
49:4d:f3:55:52:50:65:08:73:ce:ce:bb:71:72:95:f0:ee:94:
ae:3f:26:45:bf:a7:1d:53:1a:87:ec:fa:9a:54:7d:91:29:94:
de:c7:83:40:11:b0:d5:4c:9f:e5:22:df:b5:33:36:d1:0e:6b:
f4:a3:82:1d:7d:dc:43:63:45:9b:69:4a:65:fe:97:08:b4:ee:
ca:6f:86:1c:b5:6b:ae:8a:2d:74:4b:b8:18:f7:be:1e:4b:19:
bd:7c:94:43:62:af:c8:10:69:58:57:d9:85:96:ee:03:84:da:
dd:5a:63:03:06:8c:b1:ef:dd:c3:fc:e0:c3:04:e1:09:8a:68:
13:01:e1:aa:d4:46:03:ec:8a:b8:f8:78:a7:34:fb:7e:c5:54:
3d:17:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:16:27 2024 by rpki-client on console-ams.rpki-client.org