Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sd6W1TXVlUoW9n2JIB_4BioVGrU.cer
File: sd6W1TXVlUoW9n2JIB_4BioVGrU.cer (raw, json)
Hash identifier: YLcefMbd5ufKn6fXcIrI2/dbDMgPOkD8jP+S6/CGU/4=
Subject key identifier: B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B85CCF8FF694B879ECEAC06F43206A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/sd6W1TXVlUoW9n2JIB_4BioVGrU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210446
IP: 193.9.49.0/24
IP: 2a12:4880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:5c:cf:8f:f6:94:b8:79:ec:ea:c0:6f:43:20:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1de96d535d5954a16f67d89201ff8062a151ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:bd:52:0e:02:05:92:fa:9d:11:dc:4f:22:
17:ad:8d:17:46:c2:08:4e:92:8f:2d:95:08:ba:65:
78:26:87:1d:cf:39:0a:0b:01:aa:a0:83:82:73:23:
2f:8d:63:98:d5:88:d5:07:78:11:61:48:ab:49:d3:
c5:2c:b2:f1:44:5b:24:92:c8:09:31:dc:4f:71:e9:
ce:5b:5c:49:da:46:cd:c1:c0:7b:c1:56:1b:f4:4a:
fc:e1:5b:28:d1:7a:d4:5d:39:b7:22:f7:f1:3e:d0:
00:2a:cd:8d:84:0f:99:a8:8c:d5:2c:ee:63:9a:5e:
9c:9c:55:ef:24:40:31:01:ff:37:29:a2:52:89:c7:
0e:63:ef:8c:97:78:c8:06:5a:59:a0:a2:09:e3:5a:
aa:85:21:37:23:fc:34:a6:02:ec:be:0a:fe:17:ce:
30:8c:2c:4c:9e:9a:b1:46:ee:15:6c:a5:ed:00:fd:
46:57:66:4c:c5:00:b9:8d:0a:68:91:62:c4:30:a2:
b4:f4:15:bd:82:7a:68:44:21:44:79:83:37:9e:26:
7d:3e:b6:a0:bd:6f:66:12:77:7b:bf:3a:57:9a:c7:
6d:99:dd:18:1f:14:14:0a:b9:02:69:03:77:d4:9b:
36:40:0a:ff:62:6c:a1:3a:66:53:d8:90:6b:50:40:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/sd6W1TXVlUoW9n2JIB_4BioVGrU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.49.0/24
IPv6:
2a12:4880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210446
Signature Algorithm: sha256WithRSAEncryption
75:72:3f:09:a9:c7:47:7e:03:eb:5a:42:db:61:7d:1f:72:47:
cb:13:5f:0f:b3:a1:b7:60:cd:be:3d:36:28:f5:70:e1:a5:d5:
3b:dc:20:51:43:e6:58:38:71:32:44:3d:01:48:10:9c:9f:70:
d5:67:13:7c:e4:11:ab:4c:ef:6a:97:84:c2:71:9a:58:38:76:
fc:89:3c:7f:e5:3b:89:4e:d2:7d:83:9b:0c:3f:2f:43:73:94:
cd:b0:a5:56:87:fa:4e:32:be:d5:3d:79:fd:51:69:9a:e2:47:
12:72:40:f2:4f:f4:48:a8:8c:6c:8a:3e:2c:73:4e:c2:4d:eb:
6c:c7:2c:5f:62:49:82:99:dc:ce:fb:af:33:30:db:36:5b:1f:
f6:90:e3:01:d3:7f:ba:68:7c:a4:4c:7f:eb:ed:ae:e4:65:7a:
2d:3d:43:55:3d:e9:4b:19:65:c5:94:83:00:cd:5d:45:c4:87:
41:bd:17:de:49:8b:54:3e:f9:88:3a:b4:5b:a6:6f:a9:6d:59:
d3:14:44:99:da:9a:e5:10:e8:17:57:34:2f:20:a2:bf:76:41:
88:c8:55:e5:61:6e:11:8d:95:29:4e:0d:1d:c6:a9:9f:5d:f9:
6e:dd:cb:cc:e8:ad:fa:9d:fe:25:b9:0d:b8:34:18:8d:cc:7e:
d8:b9:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:00:21 2024 by rpki-client on console-fra.rpki-client.org