Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
File: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer (raw, json)
Hash identifier: mK/GA2gBJvI29jk3GdosiIJstdWNlul+RvdbSc6BdGY=
Subject key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019242E9188D371B67F7EA1EE213D77AA220
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 30 Sep 2024 12:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214233
IP: 194.164.98.0/23
IP: 2a01:f080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:e9:18:8d:37:1b:67:f7:ea:1e:e2:13:d7:7a:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 30 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:1b:bb:88:c5:38:6c:be:1f:0e:03:12:9b:
2a:b9:bb:24:48:37:5c:93:05:63:2e:79:d8:55:18:
99:57:ec:94:4c:a7:dc:78:f8:36:22:22:e5:fe:55:
85:83:e0:4d:7e:28:f9:3a:9a:4a:a2:a8:d3:00:7f:
91:af:7f:d0:8c:a7:8b:29:df:a3:2f:9c:ca:85:bb:
ae:0e:89:b4:93:25:d6:98:73:b5:4b:ba:84:84:99:
02:92:1d:59:b4:f8:7f:92:4b:56:ec:f6:63:03:42:
4f:cb:91:29:b5:2e:7b:32:46:a2:4f:0d:a6:84:4f:
21:58:ff:ea:a0:f5:4f:c5:81:ee:78:b6:04:53:af:
51:31:fb:c0:aa:2c:98:aa:71:ee:52:cf:2f:13:03:
db:e2:94:2c:e2:60:84:83:32:4a:0f:fa:23:99:fd:
37:eb:76:e0:bc:3f:65:90:8a:7b:ec:0a:c0:fc:bf:
9f:9a:b3:56:f1:9c:b5:ac:1c:65:e3:1d:4c:70:e3:
15:e1:fb:49:cd:69:de:1b:59:1b:ba:da:9f:ee:99:
36:2f:b6:39:4e:30:8f:38:a4:f3:b2:59:d2:3f:ab:
04:7f:54:69:a9:e6:ac:b3:c3:e7:ff:ba:dd:0a:ff:
11:a4:82:f1:f3:b9:ee:63:ac:d4:50:f4:24:47:38:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.98.0/23
IPv6:
2a01:f080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214233
Signature Algorithm: sha256WithRSAEncryption
31:71:29:e0:18:6c:a9:11:c4:b0:19:11:f0:1c:e2:97:85:39:
f0:81:5d:43:7c:b1:82:e4:2f:1f:66:e9:8b:69:be:ad:31:e6:
dd:d1:2b:1e:0e:d7:b5:5b:f6:26:95:fd:0f:55:51:2b:62:65:
a4:d4:95:1f:3e:a6:b4:ab:04:f7:f3:63:f3:f1:44:e8:72:a8:
a8:53:12:07:86:26:ea:84:9c:7c:47:15:fd:71:28:c9:be:a9:
b4:f3:64:a4:16:8b:8e:44:8e:70:f6:2c:3d:da:fe:a8:6a:a8:
53:42:77:bd:ee:61:81:dd:4f:33:a6:a4:8e:80:ac:07:03:c5:
bf:6e:3e:d6:81:6c:99:d9:8e:c5:58:d8:bc:d6:9a:15:1f:a6:
9d:7c:32:bd:d2:6d:1e:8a:61:d3:f7:cb:cc:60:c1:0f:ed:30:
2d:6a:48:08:c5:5e:e3:d6:85:ad:96:8b:2c:4d:c3:57:37:42:
e8:a0:a1:4e:87:b9:56:32:a1:3f:63:84:e5:1d:b5:fa:cd:fb:
9a:4b:97:0a:03:09:82:16:29:47:7d:86:7b:89:31:08:25:1c:
d0:c4:45:51:ea:f8:0b:3c:76:35:3c:05:71:97:67:7a:46:5d:
f3:cc:41:58:05:46:01:4c:f3:27:af:01:ba:15:2e:be:c8:cd:
af:4b:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:02:46 2024 by rpki-client on console-ams.rpki-client.org