Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sHiuSZBX6waDir0-3MMJEgSn8ic.cer
File: sHiuSZBX6waDir0-3MMJEgSn8ic.cer (raw, json)
Hash identifier: AWa3qPABDHrL16QZR7Hu96rQrXMkCe2QYYKbljJQyP4=
Subject key identifier: B0:78:AE:49:90:57:EB:06:83:8A:BD:3E:DC:C3:09:12:04:A7:F2:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DABF647A21A5865A3F89B2C639818D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/sHiuSZBX6waDir0-3MMJEgSn8ic.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203326
IP: 185.138.104.0/22
IP: 2a03:a6e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bf:64:7a:21:a5:86:5a:3f:89:b2:c6:39:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b078ae499057eb06838abd3edcc3091204a7f227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:b2:cb:da:52:e1:9c:a6:dd:45:bb:fb:53:
be:56:3b:6e:cd:f1:62:71:df:54:d2:27:48:9e:65:
a2:70:14:05:ae:f1:56:38:bf:23:87:af:be:21:d1:
85:cc:34:e0:27:d0:af:e2:67:ac:e6:7a:8d:e9:78:
80:00:2d:a1:01:48:99:86:f1:ff:dd:7a:4f:9b:c9:
2f:2e:72:d2:47:96:78:b7:03:c3:dc:f3:bd:af:83:
ee:fe:a0:be:77:f3:55:65:85:1d:99:33:a5:0b:45:
3f:30:f0:ca:b0:b2:00:4c:1a:11:e9:f9:bc:26:5f:
b5:45:29:0b:28:2f:ee:08:26:5d:b4:f4:c0:a9:a8:
c1:70:89:5d:29:71:fb:b3:02:ba:c2:a4:be:43:8a:
d9:7d:90:2d:67:98:d8:22:73:69:04:7e:b0:54:1f:
24:67:6b:1d:87:45:81:f5:96:34:2d:85:fd:6a:84:
54:28:d1:08:9f:44:ae:1d:d8:5c:e7:22:a9:40:ff:
fd:e5:cf:59:78:92:98:79:e6:21:e8:73:e4:a1:d2:
d4:2f:9f:f8:a6:e1:0e:e5:3b:ba:fa:42:4d:55:f8:
ce:b4:a5:dc:8b:e0:11:39:b9:66:0e:70:c6:8b:28:
b8:f8:ee:87:45:e6:07:13:a4:b2:77:f1:06:cf:e5:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:78:AE:49:90:57:EB:06:83:8A:BD:3E:DC:C3:09:12:04:A7:F2:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3b3da8-45e7-4a81-ab2e-4d60e76622db/1/sHiuSZBX6waDir0-3MMJEgSn8ic.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.104.0/22
IPv6:
2a03:a6e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203326
Signature Algorithm: sha256WithRSAEncryption
8c:36:21:7a:2e:07:51:9e:21:f5:38:e4:4a:ce:19:46:75:19:
31:fc:af:fa:0d:e0:e4:06:29:c6:cc:7d:4d:d0:88:c3:8a:d0:
95:0f:cd:2d:a7:6e:31:3c:9e:0e:31:63:c3:26:dc:c8:2a:35:
7c:37:96:71:9a:54:31:ae:9e:13:97:e2:4f:22:03:56:77:95:
1d:17:6c:cf:ae:31:24:7f:32:bf:a0:93:24:9f:36:dd:72:31:
c5:50:b8:cc:5c:a6:a1:b1:4a:85:49:26:f7:00:e9:a5:1c:c5:
11:d8:3c:dc:de:55:a2:9d:55:be:71:63:8b:c7:af:dd:5b:e6:
bc:8c:b0:77:59:c0:9e:02:b2:30:bc:b9:d5:f7:c7:57:ac:54:
64:0a:a0:50:f8:2d:b8:f0:d7:da:f5:90:bb:a0:a7:66:69:e4:
52:b4:a7:dd:c1:07:47:1c:bc:19:81:0b:76:99:3a:04:5b:e2:
1e:f0:a2:20:72:b1:3f:92:eb:36:a2:cb:14:2d:5e:e0:4b:68:
02:34:5f:bc:d3:60:97:5d:c9:e1:df:56:7b:f4:1d:06:74:06:
0e:af:29:d5:b6:ae:56:5c:60:92:0b:ce:0f:d5:a9:fd:67:e0:
22:86:38:ef:5c:8e:31:14:cf:7a:ed:52:ea:8c:64:9b:a5:e8:
ca:56:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:06 2024 by rpki-client on console-ams.rpki-client.org