Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
File: tRYDJr5-XNw1tcA2RBFjzSWkl00.cer (raw, json)
Hash identifier: hAdwtnjOk2DpEF5+Ek3m56qGZsfYBl65BW3Mcvfyk8o=
Subject key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72698D3CBB08528049099B318B37CCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206374
IP: 185.188.132.0/22
IP: 185.246.212.0/22
IP: 2a0b:c480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:98:d3:cb:b0:85:28:04:90:99:b3:18:b3:7c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:49:a1:66:7a:7d:24:c4:f9:b1:08:a9:42:
fd:48:fc:80:d2:e2:43:6b:70:52:31:96:f1:8c:3b:
5c:fd:29:20:e4:29:98:8e:5a:71:a1:ba:9c:dc:32:
c1:cd:d1:14:30:91:91:db:0b:cf:42:37:af:58:a9:
b6:44:5b:7b:98:57:cc:1f:ce:b9:23:5f:09:87:59:
38:96:e8:5d:1a:0d:8c:f0:0a:79:cf:90:0a:4f:e0:
5b:9e:85:43:2c:ed:99:0e:2f:5c:88:78:8e:f0:77:
c1:0f:06:07:0b:b1:b4:54:8c:e6:3a:71:b8:5d:1d:
ff:d1:8d:e9:2e:71:4a:3e:57:f5:4b:01:fa:13:06:
04:38:8a:61:7b:67:f3:09:cd:8c:f9:d3:28:7e:58:
c2:1d:6a:f5:50:b6:b2:e8:5e:1d:b7:5a:39:3d:9d:
57:f4:c8:99:9b:71:e5:53:bb:35:54:ed:4f:e3:66:
95:17:e9:c7:71:da:e6:b2:af:b9:7f:14:f9:97:fb:
c2:4e:da:0b:8c:80:f7:9a:55:bd:80:27:f6:79:0b:
d4:00:df:52:1e:46:ef:e8:84:3b:68:45:71:9b:e7:
90:bd:1b:ea:cd:d3:eb:cb:27:17:5b:7f:ea:4f:98:
24:fe:49:70:31:3d:0c:c5:c5:a4:15:fd:3d:79:31:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.132.0/22
185.246.212.0/22
IPv6:
2a0b:c480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206374
Signature Algorithm: sha256WithRSAEncryption
5e:b7:82:15:e6:f8:fc:65:cf:e1:58:6d:0f:2a:7a:fa:60:67:
51:94:60:d8:5e:fc:1c:5b:a8:d2:38:cc:b6:8a:20:0e:bc:24:
62:eb:ff:0f:e8:f6:ac:e9:c8:fa:45:f1:38:cb:b5:51:4b:fe:
3e:de:82:b5:94:c5:ad:4b:58:62:17:b4:89:ad:4f:d8:1b:2c:
21:25:21:57:92:7a:08:8c:c1:9b:b4:09:8d:c6:e0:c0:d5:db:
b8:b8:9c:e2:54:d5:16:c8:a4:bf:4b:96:34:46:2e:45:91:c3:
35:2a:3c:c6:c4:93:cb:67:c5:ee:0f:b1:c5:d5:b2:bd:14:00:
3f:43:fc:77:24:7c:ab:ec:22:c9:57:b7:05:99:78:c9:c8:db:
52:e0:3b:35:92:42:dd:87:c2:e0:02:28:44:64:02:bd:70:68:
6b:59:10:59:f3:6e:a9:02:3e:d0:ec:06:d2:fe:88:d2:a2:b6:
29:3c:a4:be:65:7d:d8:ce:d6:d7:51:37:c9:68:4e:6a:8f:7c:
5d:37:e3:19:0f:c8:67:e9:57:4e:b9:ec:1f:31:69:56:67:68:
48:63:53:d3:90:31:97:c6:45:06:25:6d:b8:66:30:3d:20:3e:
17:0b:89:11:0f:00:0d:d7:77:15:0d:b5:cf:92:8e:d9:b1:97:
76:1b:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:17 2024 by rpki-client on console-ams.rpki-client.org