Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
File: sLakm8wQ3jQOOdID9WZYvX1kjd8.cer (raw, json)
Hash identifier: yLnceL7YV9jufr414Wk8V5lLA+IY01BvYBfFJCwG5Ks=
Subject key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3490FC85260C2A2DC2DCFABC9C2FB7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31225
IP: 83.219.224.0/19
IP: 185.182.16.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0f:c8:52:60:c2:a2:dc:2d:cf:ab:c9:c2:fb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:cd:74:46:cb:e7:a6:3a:b7:00:3f:97:9e:
e2:ca:38:86:10:27:df:67:02:c5:fb:de:a7:cc:c5:
45:44:c4:c1:6a:f9:7e:e3:78:92:84:10:5b:1a:70:
c6:d1:89:fe:7e:8a:f9:67:55:2a:02:11:4d:43:f9:
d5:d4:43:b7:f8:c0:ca:37:fc:d2:d5:ae:2d:d0:29:
98:b8:64:d9:3b:c0:00:75:2f:5a:f1:d3:ab:40:64:
c9:20:36:a3:1c:db:d5:b1:75:45:2e:b6:bc:71:ef:
9e:71:25:11:f4:75:aa:d4:55:d0:74:5d:d0:3d:26:
b0:f6:e8:b7:6d:c2:e6:64:82:07:52:e6:69:5e:c7:
bb:d1:cd:dd:50:8a:9c:14:92:82:5a:39:47:94:d9:
ce:16:48:6d:80:23:88:76:71:3d:6c:89:04:f8:56:
3a:e2:b7:cf:b9:15:97:c8:27:21:5a:fa:69:f5:50:
22:f9:ad:66:4d:06:5d:ec:8d:44:23:3b:07:88:7b:
5a:0f:7f:52:0b:03:39:a4:1a:2e:3d:9c:fc:12:5a:
3e:44:a6:a7:1c:b0:88:f3:f5:d5:5c:9f:2b:89:2a:
78:5e:65:ef:79:c4:e4:e6:f3:27:8a:e7:68:18:a6:
db:cb:64:84:f1:92:7c:40:97:f6:a4:59:7d:61:61:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.224.0/19
185.182.16.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31225
Signature Algorithm: sha256WithRSAEncryption
65:5a:7e:85:36:73:1e:da:65:fb:04:62:8d:3f:8c:16:c6:7d:
6c:13:bd:02:d6:c7:4d:8e:7e:43:64:81:de:85:c0:35:26:35:
b9:7b:1b:d4:38:fd:40:97:38:a9:0f:0a:23:2d:3b:8c:2a:62:
3e:a4:22:9f:77:37:8e:20:36:b9:b8:e5:0b:ad:df:91:92:e6:
11:5e:43:de:aa:49:3d:e0:f3:7c:91:dc:ea:1f:0d:1f:2d:7a:
56:b4:3c:76:33:d3:b3:ed:b1:43:03:6c:80:b3:32:4e:38:20:
7e:90:8b:6a:c1:c8:3d:93:a0:9f:33:99:3f:f5:9d:8e:6a:f9:
ce:4b:46:23:1f:42:78:00:59:bf:02:3c:c1:60:d3:51:46:b9:
be:a3:a9:29:9f:36:25:f5:d0:25:09:f0:bf:16:67:93:46:dc:
a1:40:d7:32:85:58:6d:96:a9:96:48:43:a7:d3:0e:cb:c5:24:
f5:d9:9c:14:1d:7f:6a:83:41:07:65:2c:98:c0:3d:7c:52:df:
f1:88:f9:63:13:bd:b3:4f:7b:55:54:26:8e:b6:8f:a9:41:4d:
44:52:62:89:2c:83:34:ed:0a:da:28:85:c6:60:00:27:b4:01:
23:8c:3c:dd:e1:f3:43:e2:c4:b2:fc:76:f9:cb:d7:6b:9f:f4:
83:c9:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:10 2024 by rpki-client on console-ams.rpki-client.org