Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.cer (raw, json)
Hash identifier: /iJ2lnp3salcOSmQQT24zZSzXcAJs7odaFuOlKbDF80=
Subject key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94BEA281E29D70126D18CF6AF2293B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198236
IP: 92.243.69.0/24
IP: 2a10:f6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:ea:28:1e:29:d7:01:26:d1:8c:f6:af:22:93:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:e6:6a:df:7f:13:6e:36:e3:af:c8:d9:19:
e6:70:9e:b2:66:4a:69:c6:49:97:43:9a:a7:75:87:
41:85:60:d3:79:25:22:a4:fc:3a:4e:0e:b2:1b:76:
57:70:68:fe:eb:36:13:df:9f:19:04:2c:f8:a3:4b:
f7:63:c6:08:3e:72:74:dc:4f:81:d5:7f:f3:02:6e:
68:7f:88:62:ee:74:01:32:ee:4b:b5:9f:22:40:45:
89:90:69:18:f3:b1:24:fd:97:05:2a:6f:36:6f:5d:
e8:09:30:66:06:a4:f5:71:38:e3:8e:47:25:f5:48:
fb:5c:6e:58:4b:22:98:b3:bb:46:5d:8a:6b:d1:47:
cd:ad:f2:e4:c9:c5:93:58:d4:99:fb:89:47:ff:db:
18:43:85:4f:64:b5:a1:1e:c8:0d:cd:12:ee:a5:b1:
94:eb:8c:ec:ec:85:fe:61:04:51:42:a1:7a:92:e1:
cb:64:97:27:ec:b0:71:c8:77:ed:8d:b7:05:52:d1:
f2:fe:41:7a:5c:d3:5e:a3:06:a6:83:32:a3:dd:2b:
33:f7:2e:4a:90:6b:e3:25:04:79:57:d9:b6:0b:23:
b0:36:b5:f2:89:a5:07:3d:9f:1e:01:81:7f:1e:97:
77:a0:47:d0:9d:96:82:db:b8:1b:f5:ca:7d:41:9e:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.69.0/24
IPv6:
2a10:f6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198236
Signature Algorithm: sha256WithRSAEncryption
37:1a:69:bd:b2:38:59:07:d2:27:3b:50:43:6c:54:d5:32:82:
5c:ce:cd:2d:de:e1:b5:00:35:17:da:c1:8d:1f:fb:2a:0c:d7:
ef:1c:cb:e5:67:33:21:12:bf:f3:ed:2f:4a:51:f2:76:af:c3:
33:94:a9:a2:4c:52:17:98:65:bb:81:80:fb:da:f4:ea:2a:c0:
62:c1:cf:8b:66:9f:e1:ef:a0:68:43:65:6b:d4:62:88:a7:8e:
d3:43:0b:38:51:47:24:f3:41:55:75:0f:58:ca:52:f3:be:59:
e8:9e:12:7a:3c:e7:da:44:05:c3:82:f4:08:8f:3c:ec:e2:cc:
b0:54:9d:0f:b9:6a:b8:af:4d:6a:cf:fc:66:a1:03:6e:2c:70:
77:b7:e0:3b:c2:85:f7:df:4f:09:6c:3c:1b:57:90:00:e3:29:
f6:f2:91:b4:b6:58:8b:95:e4:ba:74:fa:05:5e:9f:72:7e:d9:
af:73:a5:d2:b2:fd:00:7d:41:fc:d5:e5:a4:b0:f0:21:78:61:
9d:23:09:1c:f3:48:3a:aa:3b:76:cf:ba:4e:58:5d:90:a3:de:
3c:d4:99:0c:ca:2c:9d:59:ac:ba:0b:9d:7b:77:b4:ef:a2:fb:
89:de:9e:8d:c4:53:e6:b5:13:b1:ab:e3:8e:98:28:89:2e:e9:
09:15:f3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:17:48 2024 by rpki-client on console-fra.rpki-client.org