Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.cer (raw, json)
Hash identifier: Zyr06F6Rq6qsUc8Enhpvb3PDOVwOfQCLP/79vkCCng0=
Subject key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492B7820845768F9B643BE4246F514F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12884
IP: 91.209.252.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:b7:82:08:45:76:8f:9b:64:3b:e4:24:6f:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:50:84:df:28:b9:fa:33:09:77:9c:16:11:
ef:11:01:86:51:d1:db:62:92:e8:f2:d0:b5:6e:98:
ac:f9:fb:c0:ad:60:a1:83:87:22:13:1f:df:bf:08:
55:4c:28:53:46:9a:c7:8f:94:61:1f:cc:31:0f:fb:
0b:61:c0:b3:94:c6:85:1b:c8:93:f9:c0:5f:14:6c:
b8:79:47:84:31:99:7d:ec:a9:36:1f:d6:af:25:2d:
da:13:38:9c:7d:78:fd:6c:d0:a8:ab:ba:ce:bb:f5:
a0:e3:3c:45:28:a5:e8:0c:93:f0:c1:35:a5:0a:b1:
f1:2e:43:43:0b:08:42:de:7d:87:db:17:ad:62:f7:
41:91:dc:f0:9e:11:56:27:ee:fe:22:99:2b:8f:ae:
c3:53:d8:01:8b:fd:b9:ae:9d:df:00:93:a8:20:96:
c2:21:13:ff:1e:82:ce:ff:6d:6a:d9:e3:4b:e4:36:
be:45:29:4f:ac:51:4a:81:42:27:e6:69:63:bb:8b:
61:7a:74:90:67:16:56:56:57:31:46:18:8b:29:5e:
76:ea:cd:76:4f:7f:f2:e1:8d:02:91:2e:c4:64:ca:
1d:93:c6:34:69:e8:b5:97:c3:68:cd:a7:fd:e3:df:
26:a1:6c:97:b7:ff:27:d2:d2:67:01:60:4a:fd:6a:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.252.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12884
Signature Algorithm: sha256WithRSAEncryption
17:fe:fc:00:f6:53:f8:42:bf:39:01:64:93:67:32:81:14:66:
bf:ee:d1:bb:e2:fb:fb:99:4a:48:fc:b3:07:df:a2:09:2a:f3:
72:e5:57:c1:10:4a:32:c4:7d:e4:84:3f:5a:c9:9a:2c:63:35:
a6:20:97:7e:2e:aa:55:d3:f5:1c:b1:26:be:59:c4:45:89:2a:
0e:4e:01:35:c8:aa:ec:22:96:38:38:b2:af:25:84:ee:67:c8:
7f:c0:54:0e:18:7f:25:e5:a1:61:3f:e4:da:80:74:57:57:bb:
71:d5:ed:67:87:a6:e1:58:7e:60:13:b5:76:67:e1:2f:b8:18:
05:61:d5:74:26:4e:65:92:de:23:b8:ad:cd:e5:36:78:96:34:
1c:6a:41:84:4c:ae:28:75:0e:3f:17:3d:4d:66:c4:63:03:c3:
75:ce:6f:9b:96:96:d5:4d:3e:89:ec:10:ce:fb:04:81:81:97:
b6:5f:af:2f:a2:47:c2:19:4e:d4:84:cb:fe:90:17:06:83:19:
c6:81:0d:f9:66:0d:0d:94:58:99:de:55:41:62:2c:c2:90:cc:
e8:a1:e7:12:b0:11:dd:88:55:18:3b:7b:96:b8:16:a4:e1:9b:
06:5a:07:43:12:c6:98:75:76:8a:31:9f:84:ea:1d:f2:d9:a9:
81:72:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:38:44 2024 by rpki-client on console-ams.rpki-client.org