Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.cer (raw, json)
Hash identifier: uJr3D2SVfBV0ExrlKNtzmmpdt+ulvhbg2vz6jG1N+Nc=
Subject key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A79E30A97D0CD9EB003BC8D2751D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57508
IP: 91.220.110.0/24
IP: 185.221.232.0/22
IP: 2001:67c:2aac::/48
IP: 2a0c:7000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:79:e3:0a:97:d0:cd:9e:b0:03:bc:8d:27:51:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:8f:5f:39:9d:14:eb:5d:b4:87:d6:d3:6a:
3b:89:68:7f:16:98:44:22:cf:ab:94:4b:23:7f:c4:
c9:f5:aa:cd:58:73:99:6f:55:50:e8:59:4f:23:ba:
f4:53:3c:e6:6b:40:04:ea:2b:27:75:e9:a9:a4:fa:
14:e4:db:27:2d:6c:a8:bf:27:66:4a:6d:09:4d:13:
c1:6a:14:d2:51:66:3d:e9:cf:f5:09:8a:17:77:7f:
aa:90:7d:81:bf:e0:50:c8:08:28:f0:71:80:4e:54:
12:4c:71:4b:5b:cb:2c:3b:86:52:f8:99:d9:dc:35:
06:33:07:a0:59:fc:b3:89:ac:f6:c2:c7:ea:3c:81:
ee:e5:ed:27:42:14:ba:74:39:9e:59:89:96:ae:26:
2e:95:b3:08:6e:f5:0c:e4:99:59:d5:ad:94:77:53:
87:94:16:cd:ac:e2:78:32:18:d2:0a:0b:cc:0d:7d:
69:af:97:39:dd:b5:d6:95:77:16:d7:1e:0f:f3:63:
42:bc:47:5d:e2:be:12:61:fd:43:02:97:0c:ed:12:
3a:7c:b1:8f:a0:87:b1:91:b8:c0:00:d8:f8:6f:3e:
26:f7:b7:04:26:2f:14:29:fc:e2:e9:6f:b1:5d:6d:
77:1c:0b:6b:e5:e5:6f:6a:46:f0:70:20:89:72:3c:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.110.0/24
185.221.232.0/22
IPv6:
2001:67c:2aac::/48
2a0c:7000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57508
Signature Algorithm: sha256WithRSAEncryption
51:93:ed:d9:75:c4:24:bb:06:93:42:67:ac:43:29:b1:10:21:
51:96:38:c6:4d:9d:f0:0e:ba:1b:10:ee:05:57:3d:34:d1:7a:
82:a2:55:87:53:b3:d0:3e:a3:35:e5:bd:7e:da:44:b4:ae:a4:
95:c9:90:dc:5b:42:47:c5:d7:93:95:72:24:d9:b4:c9:67:86:
fc:54:40:c6:a0:a7:9d:46:8e:44:a6:25:cd:a5:e0:ed:a1:dc:
3e:4f:f3:43:c8:3d:ce:49:de:b3:76:ae:f4:54:d7:7f:d4:b4:
2f:bb:3a:bd:a5:e4:fa:df:16:12:0b:c4:48:e0:a4:61:6b:a2:
8e:2b:46:fe:5c:71:74:45:ca:09:db:12:07:d7:7b:2e:7f:87:
4a:b3:3c:7e:48:cb:ed:e0:91:eb:84:e9:07:da:df:51:02:18:
c5:34:a8:b2:7b:d5:54:89:4f:f9:7d:0e:b3:7f:bd:18:2e:a5:
4f:f3:46:3b:1e:92:c9:e2:07:a0:64:b2:d1:53:9d:24:cc:e5:
e6:58:e3:e7:de:a3:ff:f4:d7:38:89:e1:c7:16:db:83:d6:96:
38:23:fc:ad:a7:b5:fd:f9:83:29:70:36:e3:ab:60:47:96:4e:
3a:51:e3:e0:67:86:4b:2a:ea:3e:9f:87:20:37:3a:f9:aa:8b:
cb:b8:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:31:00 2024 by rpki-client on console-ams.rpki-client.org