Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
File: u03_X665REU6fISwl-V8ccBPEfw.cer (raw, json)
Hash identifier: cvsvf7q9+sxe8kEsHiKcPnD3o+34FpoGUJgT1vrIlZ4=
Subject key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E0DFB8670D813F0E23EE06C2C2828
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25053
IP: 194.48.84.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0d:fb:86:70:d8:13:f0:e2:3e:e0:6c:2c:28:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:cc:36:b1:f4:51:fb:0f:be:da:dc:ba:5d:
b2:93:96:06:17:b0:c3:be:77:20:3e:ac:da:60:42:
37:9a:f3:9b:61:cc:1d:0f:14:b9:be:f4:4a:19:a0:
b4:a9:9c:01:81:bf:5d:b2:e3:16:f8:ca:66:fb:ed:
73:e0:e4:3c:bb:12:4f:db:fe:bd:83:39:2c:8c:f4:
14:65:f3:de:f4:0f:61:80:27:33:2b:48:08:bc:24:
a2:c2:d8:17:7b:f3:f6:41:57:a5:a3:8d:c1:98:b9:
3b:57:a0:4e:65:f7:30:f4:fa:9e:26:6b:fd:b1:3a:
d5:f3:23:d3:68:da:c0:f8:e6:71:76:6f:4d:4a:1d:
25:40:9d:6d:24:eb:4a:bc:cd:7c:aa:0e:25:8b:c0:
73:a6:d5:d3:20:f9:00:73:50:7c:dd:88:71:36:fd:
7c:a7:b2:fc:be:6b:f0:84:b4:05:8f:e8:8c:59:cd:
05:45:51:93:76:00:27:94:61:9d:31:cb:30:ca:4c:
32:06:8c:fd:bf:93:18:6f:8a:bb:cd:08:97:32:83:
21:32:42:24:82:2a:d5:0a:b5:1a:c5:41:ba:65:81:
e2:b8:af:d4:83:aa:e6:19:57:4b:d0:ff:aa:44:e6:
c4:42:59:4a:3e:ed:81:3a:eb:31:60:33:66:a1:e5:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.84.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25053
Signature Algorithm: sha256WithRSAEncryption
06:5e:be:e1:e7:5e:f5:71:b7:10:40:ee:05:ff:cd:c9:f7:27:
4a:60:e9:68:ac:65:40:8b:9d:c2:60:5a:ee:53:73:3c:cc:d1:
e9:2b:98:c4:65:b8:14:10:f0:3b:cf:c9:da:35:16:72:b7:90:
00:b0:b0:79:60:dc:7b:42:3c:4b:8d:45:68:84:13:97:a2:1b:
fd:f6:56:21:04:d9:8e:fa:95:b4:31:02:08:1d:54:12:6c:34:
49:bc:4a:bf:eb:8d:c5:15:af:8e:82:87:ad:36:38:51:d1:1a:
aa:d2:33:cf:33:27:95:f6:43:08:2d:c8:c0:3d:4b:ef:cb:ba:
13:95:1d:c8:c7:93:8e:dc:6b:03:9c:b7:a7:18:87:93:40:63:
bc:3b:12:cd:cf:57:20:40:3c:98:b3:71:8a:60:e1:84:91:6b:
8b:56:b4:3a:7f:0d:3e:7b:77:3f:fc:59:29:b3:e6:90:93:7f:
e0:1a:0c:7d:19:ea:ff:dd:23:b7:c8:1a:4f:7b:39:a8:6b:4e:
11:bd:16:26:d1:03:f2:c6:f9:71:3a:a6:69:01:09:f5:d4:2f:
a0:f1:ac:30:78:24:5c:26:52:d9:4d:a7:4a:ab:04:5b:a6:f9:
f9:f7:bd:a2:5e:14:05:64:90:48:8b:52:3c:a1:ac:45:c9:54:
c0:86:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:08:08 2024 by rpki-client on console-fra.rpki-client.org