Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer (raw, json)
Hash identifier: rxT59t4rC7mOZSKPmaqvrQHtiqJN0L+ciC9GW6QHrl4=
Subject key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC49BA8B8C4D2E1B0748F83B276374
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 196821
AS: 200729
IP: 5.191.240.0/20
IP: 185.96.124.0/22
IP: 185.143.196.0/22
IP: 188.72.128.0/18
IP: 2a02:67a0::/32
IP: 2a07:9500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:49:ba:8b:8c:4d:2e:1b:07:48:f8:3b:27:63:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:a7:fd:7f:52:a3:e4:5e:b2:07:f6:6a:4e:
af:42:bc:95:80:30:92:98:7c:0d:d1:b7:57:cf:15:
06:44:da:f6:d3:27:8e:2b:81:b8:e2:8c:f4:46:14:
44:02:01:15:4b:10:fb:99:62:88:1a:8f:6c:9c:18:
51:03:75:8d:6d:95:ba:e9:f4:cf:b8:25:fe:94:ee:
2e:ba:20:6c:b4:43:bb:d3:63:15:2a:1b:06:29:9f:
88:c4:e5:73:d2:26:96:34:21:dd:6b:ea:cd:06:48:
b8:d2:f6:97:11:42:0a:e2:4a:e3:35:5b:f9:bf:2c:
cb:9a:c0:d4:12:95:bc:0f:a4:a0:f8:31:90:ff:9d:
55:f3:c2:88:c2:82:80:3a:64:7c:ec:4d:05:81:e4:
4b:eb:1c:a4:b4:ce:c4:84:62:54:2b:10:e5:ca:92:
6f:1f:59:a9:8b:f0:35:9c:db:9e:95:c1:9e:ad:22:
19:d7:8d:a2:22:8c:cf:97:e0:2d:96:7f:f8:7e:49:
d7:f8:1f:ab:4e:15:b5:bd:9e:c3:5f:78:07:2f:bb:
58:94:88:f7:64:a0:e3:21:95:63:4a:f9:21:e7:30:
60:f3:98:6c:fa:fa:33:62:d0:e5:1b:37:0a:54:ad:
b8:3d:66:46:a8:fe:cb:5b:db:65:5d:18:1c:7e:d8:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.191.240.0/20
185.96.124.0/22
185.143.196.0/22
188.72.128.0/18
IPv6:
2a02:67a0::/32
2a07:9500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196821
200729
Signature Algorithm: sha256WithRSAEncryption
ad:07:19:74:00:2e:ef:f5:d0:f2:5e:65:ef:ac:1b:68:3a:88:
42:b8:59:fa:71:b1:b3:f4:c2:2f:6b:b5:77:11:3f:c6:f4:d5:
db:f8:2c:34:cc:24:2c:96:70:ed:cb:b4:1d:c1:b6:f9:dc:23:
b2:59:4f:bb:74:af:87:f4:2d:d8:38:df:17:3e:bb:c5:23:60:
ea:b8:74:8f:b0:1e:80:f5:9e:a5:02:17:8f:f5:f0:1f:dc:7e:
1d:80:15:33:b4:91:ba:f3:9e:9f:74:f0:66:e3:db:c3:69:b6:
76:77:5f:07:a2:31:11:0e:b3:5d:df:d1:10:37:eb:b4:ed:7f:
1e:61:e5:64:40:11:bc:52:38:da:df:48:b3:3d:43:40:68:ef:
56:8f:2b:ad:a5:8d:6c:27:88:47:52:77:f0:da:84:c2:25:8d:
20:c9:9d:b6:09:6f:fd:d5:0e:0f:62:0a:0b:c4:98:46:db:d1:
ab:63:66:e6:4a:96:98:df:df:b7:93:45:fa:d9:9d:1b:38:0d:
f2:f2:b0:f9:19:2f:e6:8e:77:39:6a:79:6b:cd:85:45:b0:06:
01:bb:4a:8b:46:7e:f7:4e:a3:17:57:27:1b:ad:4d:bf:29:1f:
1c:77:4d:cf:fc:7a:68:68:68:b7:e9:6e:a8:0e:79:2a:4b:6e:
a5:54:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:02 2024 by rpki-client on console-fra.rpki-client.org