Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
File: t5msmJxEsuHNq8JY6WypPKrUvWQ.cer (raw, json)
Hash identifier: z6Q6trtaMTO/Gl/HhlnHj13xnjaF4tyK0XBTMMxTa/4=
Subject key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7B7F17F63556DA18741CBE1189141
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204517
AS: 206359
IP: 185.242.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b7:f1:7f:63:55:6d:a1:87:41:cb:e1:18:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:72:bf:98:3e:93:2e:72:d5:0a:04:57:94:
4d:8b:db:d3:65:be:f2:ae:3d:03:39:3b:24:d8:93:
74:61:39:d6:21:96:a5:55:92:46:58:76:ea:ea:a8:
4a:96:ee:ea:47:37:04:74:6f:3f:a2:7d:0c:1e:49:
69:02:f9:1e:95:3b:a9:b6:5c:da:fe:84:5b:67:f4:
95:8b:17:c2:0d:a0:c2:79:b1:75:04:9c:51:79:dd:
c8:ac:bd:99:4d:59:f7:25:b9:6a:36:86:09:07:ec:
b0:37:ab:e0:8e:d2:11:cf:ec:20:c6:89:e4:d9:ea:
55:45:78:27:eb:47:a6:5f:c6:c1:1a:36:a0:98:e2:
9f:40:69:cd:bb:d5:0d:b4:d1:40:c2:16:10:c2:33:
27:5c:e2:a7:9e:09:eb:13:5d:14:b0:a8:c7:42:35:
e7:0d:42:98:c0:e3:b5:7d:cb:81:fc:8a:87:5c:e0:
8e:a8:2f:9c:9f:57:aa:db:a8:03:e6:ed:1f:25:f5:
ed:2b:b3:40:51:b2:cd:1d:51:d6:8a:b7:86:01:e0:
39:ca:f9:ff:c9:46:3f:b6:e4:2f:86:83:35:0b:1c:
5f:8b:40:9b:5f:0c:94:ad:1c:94:bc:7b:6a:c7:1a:
5e:af:f0:64:44:06:4b:59:73:2f:b0:dd:f5:a5:56:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204517
206359
Signature Algorithm: sha256WithRSAEncryption
10:ad:0d:a9:72:77:97:ea:d4:ad:d5:4c:e6:43:9b:d6:eb:c9:
b9:d6:15:fd:b6:43:59:f2:fb:a6:65:96:04:86:28:c9:3c:cc:
ce:43:1d:72:b9:52:0e:30:4c:bf:0b:3c:c8:ef:58:5a:e9:1d:
cd:33:4d:f4:f8:a5:0f:ab:40:f7:b7:ad:84:9d:02:ac:b0:7c:
17:78:10:f4:02:7c:22:4f:97:7d:4c:37:88:d8:c9:7a:36:0d:
40:65:98:1f:b6:21:b5:4c:f0:f4:1b:41:3f:cc:42:d4:33:8e:
90:08:92:80:24:5a:53:de:69:90:66:1b:55:95:4d:09:db:0c:
5b:30:38:e0:2b:40:d9:90:b8:1e:28:c7:fa:17:c7:e7:ab:5a:
45:4c:1b:d4:c9:a3:74:4d:65:bb:84:9c:92:08:24:c7:f7:e7:
39:89:c0:8d:47:5c:59:c1:43:59:26:15:ca:72:eb:33:d5:ba:
7f:cf:e8:9d:70:55:c5:73:df:a7:4c:59:2c:a8:e3:cf:dc:c7:
cc:a2:f0:66:3b:02:ff:e0:57:9f:6d:2e:46:c9:8e:71:5a:bf:
0e:0c:26:7e:1f:72:07:4d:84:91:ef:6b:98:f2:5c:87:02:bc:
c6:09:40:6e:e3:b2:a3:bc:d0:88:cd:57:7c:95:0c:66:11:24:
4f:3c:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:22:08 2024 by rpki-client on console-fra.rpki-client.org