Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
File: u9ky9wZLH96aEiXzMnefwi5nMjk.cer (raw, json)
Hash identifier: aF8875IlyCVfzRHJG49xQttt17G5sZWt0xSd1mXbYjE=
Subject key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6E6E2EEA19B1D806C276238BE62FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12605
IP: 81.10.128.0/17
IP: 86.56.128.0/17
IP: 90.146.0.0/16
IP: 185.196.156.0/22
IP: 212.33.32.0/19
IP: 212.241.64.0/18
IP: 2a00:cf8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e6:e2:ee:a1:9b:1d:80:6c:27:62:38:be:62:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:9c:c3:4a:59:5b:1a:44:8d:7e:42:af:aa:
60:3b:04:32:b5:82:de:66:92:70:47:40:b9:83:d6:
67:1c:e7:70:dc:6e:15:2f:2c:d4:19:d3:e0:15:4c:
de:e0:78:8d:de:03:9c:5b:3d:ab:8b:2b:65:9e:8f:
a1:aa:7b:7c:ae:83:e9:34:fd:3c:ee:44:0c:1f:3a:
5e:1d:45:d1:65:72:eb:74:61:cc:b2:03:15:5a:ff:
95:10:2f:19:05:6c:0c:99:58:fc:2f:07:27:b6:ce:
33:a5:c0:69:1e:de:06:e3:ad:b7:0c:46:90:41:6d:
ed:83:10:15:30:a4:17:e4:c1:7d:f0:8a:a9:e1:ce:
46:3b:61:e4:8c:03:69:14:50:05:d2:91:12:43:72:
67:52:5c:8a:c3:e8:df:da:2b:fc:04:e5:e9:5f:f6:
e2:71:e0:6e:1f:ec:30:56:29:c2:56:0e:24:ff:73:
e3:9f:d6:78:4c:e4:44:4e:35:04:52:15:a8:81:a9:
02:c0:48:be:ad:ce:4f:7c:41:b6:2a:d7:38:f6:a7:
e1:1b:f6:cc:9a:bc:d1:86:82:82:35:7d:a8:f1:4e:
3b:4d:9d:1d:65:83:8b:52:f0:20:e4:98:1d:df:bd:
bc:55:53:f4:1a:b6:9e:d8:7b:b9:fa:e1:92:41:0c:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.10.128.0/17
86.56.128.0/17
90.146.0.0/16
185.196.156.0/22
212.33.32.0/19
212.241.64.0/18
IPv6:
2a00:cf8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12605
Signature Algorithm: sha256WithRSAEncryption
07:ae:7e:f2:c5:2b:6f:f3:a3:e2:42:aa:46:d1:59:fe:c2:5e:
7e:e7:41:a1:0d:42:a0:d4:71:2b:3c:86:ba:85:50:1c:48:a7:
ee:ce:3a:af:f8:4b:d8:fd:ae:a5:39:e5:f8:e1:d1:15:55:56:
10:f3:aa:26:71:d1:1b:49:35:d2:28:39:d6:f7:58:e4:c5:9e:
a5:ec:54:e8:d7:9b:f7:c9:be:db:00:06:af:d4:a9:62:a7:bf:
37:12:aa:e0:d6:9d:92:1d:59:ef:59:f9:b8:bd:86:3d:83:4e:
34:de:a7:0c:c7:20:17:72:31:f4:33:fe:00:9f:57:10:b3:b7:
1a:b4:39:cd:82:20:48:f5:fa:13:72:77:58:3d:09:54:0b:49:
65:6d:d2:67:7b:1c:5f:5d:cd:c2:3b:ac:fb:a9:34:7e:b5:9a:
5a:08:46:57:c2:00:0a:29:e2:00:d7:fd:a8:98:32:04:f3:60:
14:48:02:7e:4e:80:84:f9:e0:01:3e:e9:7d:83:89:26:6f:cf:
23:25:36:e4:72:51:f0:e3:41:8b:8c:83:f7:34:13:45:8f:c1:
56:8e:38:3e:22:2c:6a:0c:3c:be:20:63:7b:29:45:d1:0f:2a:
7a:f8:a3:80:fe:78:2d:5a:f0:d0:0c:76:fa:00:23:23:79:09:
c7:38:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:33:08 2024 by rpki-client on console-ams.rpki-client.org