Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
File: G_x3OM0P0OBEf510nOajkEf9y6w.cer (raw, json)
Hash identifier: QqlHBQxOmb7OFsSettb2544dcncYcK7NC8Br5306bCw=
Subject key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DCD21571FDF2442D7AD99C5D98C78D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204694
IP: 185.243.72.0/22
IP: 2a0d:980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d2:15:71:fd:f2:44:2d:7a:d9:9c:5d:98:c7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:6f:7c:7b:eb:31:ef:70:1c:8b:f4:62:46:
89:e7:26:9d:13:09:3b:6a:d9:ff:86:0c:cf:a3:12:
8c:16:5e:1f:f4:b3:22:f3:cb:35:fe:42:4c:7f:7f:
e0:0a:40:b0:8e:e4:4c:9c:45:80:a6:8e:af:ea:23:
59:b5:1f:60:46:df:39:e0:74:c2:df:1e:8b:e0:9b:
d8:34:ce:19:f5:f0:c2:33:95:e8:21:ad:a3:ac:71:
bb:b7:20:7d:dc:a1:60:af:68:a6:6e:d0:23:2e:53:
4e:70:a4:ef:ba:4d:84:5a:06:3c:93:e3:c5:03:50:
b1:66:61:e5:1f:15:74:01:2a:ea:66:26:5c:42:5b:
45:ae:12:6a:85:5e:ff:20:c3:cb:42:41:e8:21:5b:
28:0e:17:f8:0b:6f:e0:d8:62:29:40:be:66:d3:fa:
30:01:05:e4:ad:b3:70:ce:d0:d1:ff:2c:cf:80:11:
e4:d0:4c:92:81:f2:03:d7:8d:21:b0:31:65:f6:27:
14:3d:23:2e:e6:3f:53:aa:0e:1e:c7:ac:5c:fd:da:
58:f3:54:4b:a1:74:44:bc:c5:61:fb:47:9a:e3:ea:
92:ad:a5:a8:19:2f:01:c9:17:cd:51:ef:99:2b:d7:
47:51:3b:4c:02:ef:21:09:41:22:de:06:38:fd:bf:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.72.0/22
IPv6:
2a0d:980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204694
Signature Algorithm: sha256WithRSAEncryption
4c:53:a2:24:40:e3:2a:3e:5e:0f:ea:7f:e3:49:be:67:64:20:
96:e4:5d:74:e6:a5:b3:46:a6:6b:36:4f:b1:f4:1f:fe:2a:50:
e8:33:97:78:4c:e4:04:e3:fd:c8:ae:27:fb:f5:d5:45:9e:5c:
3b:ce:1e:27:ad:c3:62:a1:98:80:3b:1a:a1:8a:0f:78:03:a5:
68:25:b0:0f:d7:35:18:15:6e:dc:34:47:dd:ca:bc:39:a3:05:
a6:41:e9:77:c0:75:1b:64:84:f2:1c:39:f9:d2:b8:09:34:cf:
67:1a:62:46:db:53:f6:5d:62:db:b0:72:42:f6:39:9b:64:87:
48:2b:47:ba:1b:3c:4c:1e:e2:3d:b5:cb:73:c3:43:5a:48:f2:
a1:9f:2b:59:a5:0a:27:58:e6:45:5e:5a:7a:a6:a0:df:07:1a:
68:2a:8b:43:c6:c9:87:1d:56:8e:0c:98:d1:53:81:f6:c8:c4:
84:f3:b9:df:fd:c9:a7:07:ba:a7:eb:dc:ff:86:83:64:9d:ab:
6d:c3:a3:58:5f:fc:06:0f:c3:9a:16:05:66:a5:f2:30:14:22:
f0:d0:d0:65:f6:17:28:08:d3:2e:31:f0:b2:9e:bb:db:50:12:
ff:35:27:fc:ee:fc:df:6f:96:6c:5d:dd:28:e6:bf:09:f8:23:
29:29:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 03:16:11 2024 by rpki-client on console-fra.rpki-client.org