Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/unlm7P2LwtMYM_cK-6T3-KFbJKM.cer
File: unlm7P2LwtMYM_cK-6T3-KFbJKM.cer (raw, json)
Hash identifier: sh3IFMPiwQlRU4awaG0lIVZodUqDCILMdN8wYgzSH1U=
Subject key identifier: BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4934F63C2E3F38F428F7348D933D45E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212339
IP: 185.215.224.0/22
IP: 2a0b:ae40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4f:63:c2:e3:f3:8f:42:8f:73:48:d9:33:d4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba7966ecfd8bc2d31833f70afba4f7f8a15b24a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:28:fa:1e:91:48:87:df:0f:7c:61:0d:ac:
9e:0a:ea:04:a3:62:ad:d7:40:eb:87:f2:c9:d5:54:
13:18:ff:ce:0c:df:30:20:b7:6b:fb:6f:cd:c5:58:
cc:b3:a2:8f:27:20:2f:f5:6b:62:c0:0b:28:c2:a3:
11:0f:b5:8e:1e:3a:38:45:23:7d:40:db:0b:74:8a:
a2:92:06:be:8b:dc:17:ba:3e:c6:4a:87:ac:c8:ae:
f6:10:95:b8:4d:86:96:25:49:dd:54:e1:b0:ff:dd:
a3:f5:38:70:0b:a8:26:5d:26:b6:14:ed:09:01:d8:
db:70:b0:6f:b5:0b:af:03:c8:47:7d:4c:e0:f1:92:
aa:69:cb:5b:b2:d0:94:0a:6b:79:be:a3:b4:53:e1:
5a:f9:b6:28:05:02:1c:68:7c:d0:f4:56:a7:41:82:
7f:3f:99:7f:9c:27:a6:95:0f:ef:15:bc:f1:f9:ce:
85:99:a8:ae:a2:0e:77:ee:48:95:45:aa:07:ff:b4:
43:ea:63:87:e7:14:05:f3:59:f0:6e:5e:b7:f2:e3:
79:1e:a3:e9:cb:a9:79:16:b1:09:65:e6:1f:88:8b:
98:fe:2a:82:e5:ae:ad:19:f4:81:71:0d:83:32:32:
76:b2:e5:71:4c:08:82:0d:91:d6:06:04:cf:5d:0c:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:79:66:EC:FD:8B:C2:D3:18:33:F7:0A:FB:A4:F7:F8:A1:5B:24:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/86f350-94df-4830-8e9b-fb0443b8d9be/1/unlm7P2LwtMYM_cK-6T3-KFbJKM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.224.0/22
IPv6:
2a0b:ae40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212339
Signature Algorithm: sha256WithRSAEncryption
81:b6:b5:56:d5:23:20:b6:d8:9e:a9:c9:5b:5d:80:52:b4:4b:
6b:14:8f:65:9f:04:01:64:86:7a:49:ea:8d:90:bf:f3:c3:77:
e4:0b:b3:8f:1f:65:c7:01:2d:5f:6f:a2:79:09:89:7a:71:0e:
d1:bc:90:91:1f:19:7d:50:e7:bb:20:b2:11:88:1c:6f:90:78:
bd:72:7c:eb:60:e9:a0:96:84:e3:02:d5:2c:44:e1:a8:2b:81:
26:6f:61:96:76:cc:6a:41:45:39:11:f9:80:18:8f:c4:59:cd:
99:b7:ab:bf:16:37:1d:85:ad:4a:e9:24:ab:9b:6a:1f:43:4c:
e7:46:6f:ea:28:ba:43:23:fc:56:9c:c7:e7:0d:9b:dc:68:80:
48:37:c4:c7:49:77:db:6b:b0:3e:b5:ab:5f:6e:18:a0:65:98:
a7:1b:96:eb:a6:6e:95:02:50:dd:e5:bf:f2:97:26:71:9f:4e:
39:39:34:b6:2f:1c:3f:73:fa:a5:db:07:c3:e2:51:d4:fc:7e:
5c:2d:49:c5:be:7a:24:c5:e7:e7:6c:26:b7:b3:04:ac:94:bf:
e1:48:c2:5e:3a:65:e1:7a:96:4c:c7:76:c1:f3:25:c4:f9:a4:
3f:dc:ff:11:20:33:b7:f3:02:77:7b:ea:3a:c6:df:2a:ce:9d:
b9:83:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:48:46 2024 by rpki-client on console-fra.rpki-client.org