Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
File: sKVpmgjHv9cHz7BtMhP1ysvyglc.cer (raw, json)
Hash identifier: RY3k0Y3IcEO/rx537wLErsXHObs8zAe+UPmlt9d09J0=
Subject key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8701FFF69E37C5729FE1D3EBFAD1C04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206930
IP: 185.171.164.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:1f:ff:69:e3:7c:57:29:fe:1d:3e:bf:ad:1c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:d4:ff:69:2a:ef:e8:8d:6c:a4:a0:9c:6d:
b2:6f:66:bf:c1:1c:b7:a7:fc:a5:70:19:bd:13:7b:
57:12:6d:a0:0f:58:ea:8a:8a:4c:e7:c0:38:67:d2:
73:f6:6e:7d:58:ca:ea:65:fd:7c:fb:cf:96:1d:79:
e5:04:22:0c:00:60:89:60:d6:cf:5d:26:1c:a9:f3:
6b:c2:48:83:c4:02:91:c2:42:11:d2:ad:8d:d5:38:
63:08:45:63:ee:cd:bf:d3:6f:29:09:8e:6f:cf:c6:
35:b9:63:54:02:12:87:2c:5a:c0:28:96:d7:0c:b2:
47:74:8b:e9:de:1e:4b:27:62:4a:6d:74:c8:38:7f:
16:07:de:b5:9a:d5:ed:f0:73:20:c8:5f:63:e2:8f:
00:df:07:1f:ff:7e:4e:f5:8b:93:94:53:18:1c:fc:
08:55:f1:10:a5:67:9a:ba:13:55:ee:da:56:cc:16:
fb:bf:0a:c5:99:d1:14:a8:4a:7f:78:5c:d5:15:24:
6d:51:69:68:62:c9:e0:ab:a4:57:68:e7:c5:8d:d9:
47:8b:d2:17:8d:5b:75:df:6f:1d:a3:81:d0:29:b2:
38:9d:62:13:3e:ae:4e:f0:94:88:08:e5:36:64:01:
47:91:60:b1:d3:4a:a8:06:15:87:2c:78:9f:8a:01:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.164.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206930
Signature Algorithm: sha256WithRSAEncryption
33:b4:bb:62:59:1c:3a:6d:d6:d1:85:15:dc:0f:2c:e2:91:91:
89:f9:8e:39:f1:96:ab:74:1a:42:b0:71:1d:61:72:37:86:d3:
81:4c:8d:2f:c0:ef:f4:1f:a4:24:c6:a7:1d:8b:2a:10:0b:7c:
e5:6f:d2:6b:4e:00:4a:56:e4:df:c9:84:f8:03:13:0b:a5:b1:
18:d2:15:86:0b:9a:65:cd:f6:5d:73:1e:69:b6:76:71:f0:d3:
5c:90:f5:a0:77:d4:4d:a3:64:bf:39:6b:4b:bd:95:35:71:9a:
ec:12:7d:76:37:cb:67:a7:43:6d:eb:bb:ba:99:d6:cf:98:b4:
82:9f:7b:b1:30:ab:e5:77:6b:52:65:f3:13:c1:1e:c0:0e:1c:
13:ec:ef:56:eb:5a:c8:f2:93:20:93:59:45:9d:8c:76:a1:c1:
c5:9c:12:71:d1:b5:83:12:67:c9:17:08:df:82:07:15:d7:81:
81:30:ba:c6:91:74:9f:66:6e:bb:0f:ea:78:76:4d:42:e3:e6:
da:78:d2:8c:60:fa:08:63:ef:b5:dd:6d:1d:de:62:78:99:47:
47:58:5e:cf:de:23:7e:d4:24:db:44:c8:71:fa:6e:a7:22:68:
06:0f:61:ae:b0:6b:7d:72:c7:43:54:9e:02:7e:6b:5e:51:02:
e3:13:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:09 2024 by rpki-client on console-ams.rpki-client.org