Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer (raw, json)
Hash identifier: akls46DjD04yZ3GNLBolVKai31HUlJiR7u4bneuDIZU=
Subject key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349469B923B4ADED2A84314BBCD613B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61076
IP: 185.231.52.0/22
IP: 2a0c:4100::/29
IP: 2a13:bc80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:46:9b:92:3b:4a:de:d2:a8:43:14:bb:cd:61:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b79de9458d190e634329f9df1503b5222c1624ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:aa:30:58:31:af:8a:b5:29:4a:5a:ba:e6:
48:36:76:ef:2e:86:6b:40:29:66:d3:b4:d2:09:e5:
5d:e5:ec:cf:6f:b0:0b:0b:62:ad:c4:70:3a:09:49:
68:d6:27:0e:0e:2e:82:6b:ae:ea:cb:21:1b:f8:b4:
6f:97:c2:97:f5:c3:fd:89:ec:bd:2f:53:24:b1:35:
74:30:8c:68:a0:cd:c1:41:2f:8a:38:93:11:90:37:
5f:c7:60:cb:5c:7c:4e:3b:74:47:e1:dd:4d:31:ab:
94:f3:82:ea:35:0b:bb:af:5f:3a:b4:73:76:c7:79:
e9:c4:09:54:84:6e:a6:a9:55:26:06:4c:b1:21:d7:
bd:61:5d:48:af:98:32:08:53:e1:3a:13:c9:fb:51:
e1:0c:f9:fd:74:f0:63:92:67:6d:2a:0f:38:4e:59:
47:12:f1:15:ab:3b:c2:ce:15:66:ee:2a:98:b3:90:
5d:c2:35:07:f6:0d:15:c5:5e:69:d4:8f:71:9b:02:
9d:09:a1:34:1c:16:80:45:a5:86:82:1b:44:cc:03:
90:e8:2e:b0:d1:c0:4c:1b:dd:d8:ec:b3:a9:fe:b1:
87:f2:29:e1:0a:8e:83:1b:7e:b1:79:52:93:2a:03:
99:49:0b:b6:fc:7d:80:09:d2:6d:ee:2b:70:a4:22:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.52.0/22
IPv6:
2a0c:4100::/29
2a13:bc80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61076
Signature Algorithm: sha256WithRSAEncryption
29:dc:0a:9d:c2:83:6b:22:09:79:78:a3:a3:72:e4:d5:91:32:
f4:3d:ad:cd:b6:a2:cb:52:04:9a:e9:8f:a0:54:34:75:f4:5d:
63:68:21:cc:36:aa:f7:76:9e:f6:e2:5b:60:b7:d9:37:9f:15:
6e:eb:23:55:d9:26:c9:62:2a:27:d2:84:d2:90:0b:bd:d0:13:
97:02:01:36:f0:06:ad:5d:84:63:ad:a9:02:ed:96:62:b3:7a:
5a:4a:44:04:39:fe:93:95:16:29:cc:6f:ef:2b:45:ea:29:a8:
e3:fc:00:b2:da:10:ba:38:13:fc:f4:6f:cf:7e:c9:bd:c5:45:
ba:aa:9a:4e:7b:d3:32:ba:8e:05:3e:d0:1e:8c:a2:70:54:93:
dc:2f:c2:4e:ea:06:59:c3:a0:0a:be:e5:e4:ad:e2:20:09:62:
9a:03:96:c2:0e:84:27:65:12:80:bc:12:14:bb:c1:98:c6:c1:
77:28:c0:fc:71:b9:ab:5b:db:5b:ff:b7:b7:03:cc:8b:27:2f:
9b:e6:65:8c:c9:09:0c:5e:83:5c:f4:41:37:1c:a9:a1:09:3c:
97:b3:ca:42:76:ca:d9:09:44:82:b6:6a:a5:d4:f2:18:49:ec:
4c:0e:d9:59:ad:5f:5a:1b:3b:81:b6:53:da:b5:4f:45:eb:07:
a1:77:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:05:22 2024 by rpki-client on console-ams.rpki-client.org