Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.cer (raw, json)
Hash identifier: /jrMssWlprfTzTnqWO354g/a+vGD1GlHrD0PA1f0k/k=
Subject key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F3585476174B078588F777D74D2D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21269
IP: 92.118.240.0/22
IP: 195.95.132.0/24
IP: 2a09:b240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:35:85:47:61:74:b0:78:58:8f:77:7d:74:d2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:d0:bb:df:78:ac:63:be:c2:d8:2f:7f:9b:
5e:91:24:7d:ce:4e:4d:eb:d8:4e:30:1b:fb:f2:d5:
cb:f2:50:2c:9b:2b:c1:cf:19:01:6d:29:0f:53:20:
3c:a0:7c:bc:d7:4f:29:37:1c:00:3b:c9:01:05:89:
7e:e8:89:73:9b:ca:0a:4f:60:79:83:1e:b8:35:37:
1e:e0:26:04:4e:3d:58:16:a2:bd:e2:65:de:a5:dc:
48:e9:bf:12:16:74:30:53:5c:e9:4e:17:45:ee:e3:
0b:f7:fd:65:d3:99:cb:cb:4f:91:db:a2:97:a1:0a:
43:2e:49:1e:f8:1f:7c:ed:38:dd:4f:1d:98:91:5a:
bd:b2:e4:9f:73:c1:03:44:00:27:50:bc:4b:ed:9f:
49:34:ea:6b:48:ac:7b:89:41:1b:8e:0c:36:f1:5a:
ef:04:4b:68:7f:cf:15:22:ea:88:e9:0b:96:df:bf:
49:cc:f9:b3:5e:60:9f:31:6f:eb:52:86:3a:5c:f5:
32:06:65:ba:88:ab:8d:9b:b4:6a:3a:51:90:fc:f9:
c6:9e:a7:8a:68:70:88:bc:e2:ac:b1:87:fc:a0:4a:
bf:9d:0a:66:cf:07:9c:7b:34:3e:3f:e0:74:5d:02:
02:ff:aa:c5:3a:0d:17:48:1e:a3:db:aa:9d:19:8a:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.240.0/22
195.95.132.0/24
IPv6:
2a09:b240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21269
Signature Algorithm: sha256WithRSAEncryption
13:68:ba:02:8d:9b:12:a8:d7:90:e1:3d:c4:6f:b5:90:92:a8:
1e:4d:81:62:0a:0e:01:88:40:29:e7:e2:b6:f9:c0:e1:9e:49:
a0:7a:26:cb:e7:91:77:9a:a4:a6:c5:91:56:00:45:de:8f:04:
82:c6:5a:39:7e:37:57:ca:56:96:34:4d:60:a0:57:36:54:28:
77:7a:9c:3f:08:70:b4:d3:0b:b3:aa:67:9d:99:bb:b8:54:2c:
70:5a:d2:95:96:37:94:ad:b5:56:7e:5a:5b:13:c7:e2:f4:e7:
27:9c:89:25:22:e6:1a:3b:70:72:db:cc:37:54:a4:96:bf:4b:
4a:c3:89:c2:1f:80:65:ed:61:0c:8d:15:93:4b:cb:c8:d7:d4:
7e:a0:e0:85:08:47:54:f0:e3:e9:3f:ab:61:f3:38:eb:7c:ca:
97:6d:e6:bb:6a:a6:1e:83:6e:f2:d6:36:15:40:30:33:cf:a3:
d6:97:e2:e9:ac:76:a6:43:d4:23:2b:2b:c7:ef:5b:36:5e:a3:
9a:bb:84:58:52:66:49:02:1d:ec:94:cb:04:38:7a:11:35:6c:
24:bc:46:dc:4c:42:5e:46:9f:fd:9c:b5:03:3e:ee:a6:a0:69:
7f:c6:9b:58:c0:b6:e3:91:62:70:dc:07:0c:4a:58:50:43:22:
9b:ef:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:41 2024 by rpki-client on console-ams.rpki-client.org