Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer (raw, json)
Hash identifier: QmulTvm560Qjt+ddS0OHA1+TpfzscZAQYGb7XKlY7NA=
Subject key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7AB0196F5FD6364BC7FB477468841
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 38919
IP: 89.190.140.0/22
IP: 185.92.68.0/22
IP: 185.132.108.0/22
IP: 2a05:f080::/29
IP: 2a0e:f800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ab:01:96:f5:fd:63:64:bc:7f:b4:77:46:88:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:b0:7f:80:ba:0f:d5:6f:80:2e:c2:72:e1:
79:e3:ce:91:94:38:a9:67:83:31:35:ab:9d:26:a2:
e7:c5:61:28:7e:37:50:04:a8:84:70:dc:74:98:52:
47:b7:1a:95:ff:3e:26:be:19:e7:da:5c:be:08:fe:
09:72:cd:90:db:79:45:92:18:e0:b1:cb:3f:d1:64:
55:f0:28:f6:b4:3b:55:e4:03:ee:81:7f:f9:08:c1:
d9:ac:68:8a:56:e1:2c:8c:c0:57:db:22:2d:c0:ba:
03:f8:d1:a3:2b:b7:10:78:f1:a4:19:6f:cd:71:b7:
3c:5d:77:ea:de:9c:b0:45:42:79:2e:b6:cf:b9:e9:
59:7b:b2:72:81:ee:b1:44:6d:b3:9e:61:8f:b1:4f:
80:97:61:91:29:85:69:9b:ad:3c:8d:05:fb:d4:dd:
a7:4b:b4:b1:df:95:70:5d:d4:04:5e:c9:f1:ee:14:
10:3f:67:83:5b:7b:0b:a1:05:fd:d4:b7:df:f2:63:
9d:c0:e0:44:09:e4:4f:81:f0:80:f9:75:28:6e:5c:
76:43:01:94:65:1c:e4:cc:de:40:60:35:72:4b:40:
e1:08:30:b8:a7:89:c8:dc:16:33:99:f8:d8:96:32:
6d:dc:f1:70:10:22:2f:50:46:a9:54:b3:63:93:ad:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.140.0/22
185.92.68.0/22
185.132.108.0/22
IPv6:
2a05:f080::/29
2a0e:f800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38919
Signature Algorithm: sha256WithRSAEncryption
14:28:de:3e:18:43:65:64:39:1e:de:5d:1b:16:72:14:40:6c:
99:7e:57:19:39:35:c1:57:da:7b:b1:90:c5:6c:7e:00:8b:91:
af:95:e8:e2:43:05:19:7b:99:05:20:cc:a6:b4:8e:ad:18:eb:
a3:18:14:ae:9b:5f:2d:c1:ca:b0:f5:1d:ff:c7:ac:4a:1d:45:
8c:b8:a7:dc:12:36:ff:8d:a1:79:e0:49:6b:28:85:56:b6:7f:
9b:db:63:b0:81:47:32:19:44:80:71:5a:65:12:58:ce:dc:e1:
bd:07:46:c0:de:4a:1e:29:36:e2:be:d3:6a:c2:36:d1:e4:a9:
f2:c0:f7:b9:15:dc:0c:fa:c3:20:3f:70:1e:67:49:f8:b4:a8:
53:36:bb:35:5a:c7:28:b1:45:8f:51:1d:71:56:40:a1:de:3d:
d6:d0:47:a2:12:c0:9b:3e:de:8a:9c:73:5c:18:33:45:24:eb:
87:43:d2:a4:b2:a9:3e:a7:77:47:11:93:e0:b2:f8:dc:88:39:
09:ee:3f:c4:fd:f0:82:19:d3:e7:cf:8f:c0:bc:91:ce:60:57:
11:eb:ac:9a:9b:ad:a7:50:4b:30:86:94:03:b6:3c:41:5a:3c:
dc:99:9e:94:43:1b:de:32:71:3b:bc:a8:28:e9:fb:7a:9b:f1:
f8:a3:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:02:08 2024 by rpki-client on console-fra.rpki-client.org