Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.cer (raw, json)
Hash identifier: F8iMA8vAAfewLZm4vJxiKG+73n/f1MsXo3aIo0y8nu4=
Subject key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01922923D11E966BE1CA1038F0310F61849C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Sep 2024 12:24:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12666
AS: 20710
AS: 197629
IP: 80.65.0.0/20
IP: 91.223.172.0/24
IP: 185.194.16.0/22
IP: 194.153.74.0/24
IP: 2a02:2948::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:23:d1:1e:96:6b:e1:ca:10:38:f0:31:0f:61:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 25 12:24:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d20b08e607668e06050084ee37928a1c0b035492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:9e:91:cb:f2:e1:2a:5c:ec:5c:e6:bc:d0:
c1:69:45:bf:36:9a:1d:87:97:60:47:37:34:88:c9:
cb:fe:9a:8e:b0:ee:f0:8b:94:02:dd:7f:1d:34:39:
d3:e4:42:2c:3c:96:ea:8a:75:a1:32:b3:cf:c9:d8:
c3:3b:07:9b:1e:ea:5c:47:a8:67:9d:a2:c6:52:0a:
d3:f0:6e:40:b0:53:57:b8:75:12:d6:99:7e:c7:c9:
2a:06:89:a5:eb:50:29:91:5a:d4:e5:6f:29:de:61:
c6:e8:ae:56:15:d6:3a:4c:c7:e1:b0:cd:9b:1b:f1:
02:d6:c4:ad:3c:0a:a6:1c:66:1b:69:37:5b:eb:50:
dc:96:64:ad:a6:9c:29:6b:4c:dc:9d:3d:d9:c2:ae:
20:33:7e:1b:11:68:01:68:42:1d:11:ba:ad:77:9e:
ea:da:3b:ed:37:0c:22:53:2a:45:a9:d2:2a:9b:4e:
eb:b5:fd:e1:be:a2:d2:ff:c6:21:fe:c8:4c:c8:8e:
95:fe:e3:f3:b3:55:11:34:f5:77:e5:59:2f:45:82:
c8:31:ed:18:f7:14:b5:3d:e6:96:7b:df:87:49:50:
d4:c9:d8:7f:f8:c3:2c:55:a4:43:c8:ff:e4:7a:d8:
47:51:f9:51:18:35:5b:04:70:b2:25:6a:e0:cd:6d:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.0.0/20
91.223.172.0/24
185.194.16.0/22
194.153.74.0/24
IPv6:
2a02:2948::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12666
20710
197629
Signature Algorithm: sha256WithRSAEncryption
1a:27:a2:55:5c:9c:5e:11:dc:2a:05:62:84:33:9a:2d:8d:42:
23:c3:d6:0a:c1:36:07:fd:de:03:e2:b5:90:dc:a3:64:8a:2d:
c6:09:49:6d:09:bb:d2:0d:5b:cc:92:ca:57:09:de:38:4a:f8:
fe:43:6f:a5:3a:64:4a:41:f2:cf:48:e2:33:b7:b5:5e:d5:08:
ff:29:0f:6c:6c:18:e4:e4:5c:bb:b3:14:73:6c:ef:93:b3:5a:
59:41:f5:a8:53:63:19:12:c1:74:44:4d:63:64:97:13:79:ca:
a4:bd:48:bb:08:67:96:db:3b:3e:4e:a8:ea:a5:ec:90:b3:f0:
68:bf:9c:8c:21:29:2a:61:93:95:f4:13:c6:2a:fb:6b:ae:61:
14:2c:43:9c:d2:d3:04:dd:fc:80:16:be:b1:72:48:75:11:da:
40:55:37:13:0a:ee:d8:07:96:78:b9:54:2b:0b:22:96:11:f4:
bd:79:d8:03:a0:89:7e:0f:1f:03:6a:66:76:ac:20:c8:e9:a2:
7d:2a:ce:6d:a5:8f:a1:3f:df:9b:63:90:fa:0d:bd:63:cd:28:
4c:7d:91:75:95:9e:bf:88:7b:cf:53:24:4f:7c:4e:b2:12:8d:
a5:fa:d4:0e:f7:6d:71:8f:e9:e0:35:c5:66:b6:ea:5c:b7:43:
58:31:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:35 2024 by rpki-client on console-ams.rpki-client.org