Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.cer (raw, json)
Hash identifier: Oys2tbk/kVXxDmfqiD8A2UuC940WPrHBqd110KLg1Cc=
Subject key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CFF6DD553A599CF44E6740131AA29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202882
IP: 185.151.220.0/22
IP: 2a07:7bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ff:6d:d5:53:a5:99:cf:44:e6:74:01:31:aa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:81:dd:1f:36:39:31:d2:36:20:a9:67:ec:
ad:8f:89:12:09:1d:2d:7c:fb:d5:95:5a:5a:e5:73:
e2:d4:f7:24:d8:a7:5e:9c:d5:52:ef:37:4a:fb:d5:
31:1b:01:f0:b0:73:5b:b6:65:cb:6a:56:5e:7f:88:
d5:43:7a:7c:cb:7b:16:7c:88:1e:33:01:b5:c1:9a:
d0:43:42:19:8a:c6:39:23:dc:db:8a:39:b3:e2:18:
6e:22:7f:85:e3:46:41:f9:52:77:82:ff:12:5b:78:
fc:13:3b:ee:c3:a3:5b:a6:58:c7:51:48:d2:39:2b:
67:29:d0:1b:60:4b:7c:bd:bb:3a:69:30:80:a6:41:
93:c7:24:f5:ad:f3:10:2a:24:eb:02:5f:ba:ca:fd:
26:65:78:86:f7:c2:6c:a9:db:15:6f:24:60:3e:62:
a9:f3:71:f4:5e:72:a6:c1:ac:c1:a5:15:eb:77:a7:
3f:71:40:f3:25:aa:d9:6e:f8:01:dd:49:70:84:6d:
1b:53:df:01:a6:ba:de:77:35:b3:bc:5e:21:3d:5a:
4a:1a:cb:d3:2f:64:f2:37:bb:55:51:35:71:96:8e:
3c:97:a8:e0:55:ae:e7:c3:83:01:9a:5e:9e:85:8e:
8d:eb:1f:e3:45:a9:fa:b9:93:47:9f:a5:0f:a8:62:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.220.0/22
IPv6:
2a07:7bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202882
Signature Algorithm: sha256WithRSAEncryption
1d:08:00:c9:6f:80:8e:31:dd:d8:80:60:dc:71:fd:08:05:75:
9a:a4:dd:75:f2:96:89:5f:b5:66:06:7d:c3:86:f9:b7:c1:6a:
98:62:88:b9:16:e9:53:e5:30:37:ec:c3:8a:03:28:f8:99:3f:
1d:c2:2c:19:ab:b0:84:db:50:80:f2:fc:d9:65:70:35:a5:9f:
9f:76:54:54:08:50:da:11:aa:57:86:26:f9:f2:98:f0:fe:78:
94:f5:01:a1:a8:2c:ee:30:64:4c:fc:d7:6d:ab:cd:01:d7:ae:
e5:d7:c0:be:a6:6a:cb:5a:4a:55:aa:86:2b:8f:88:03:04:4a:
76:70:09:66:4f:82:64:22:16:41:3e:62:44:63:ff:f8:4a:5c:
79:1c:58:95:28:6e:78:b2:20:4d:fc:03:e9:dd:1d:99:dc:90:
98:97:97:6a:9f:2e:96:9f:0d:22:db:a3:a0:31:b8:2b:3f:9a:
d7:4e:8f:14:28:8c:05:46:12:85:96:c1:ed:5a:19:15:74:90:
88:89:50:17:9a:b8:f9:29:b6:74:c3:63:a4:6c:8a:10:8f:ae:
ce:4a:15:a3:39:71:1f:28:81:02:08:80:e0:bc:a9:93:2b:6e:
c2:2d:d4:4c:ff:bb:66:c7:17:9e:b0:d3:e5:d1:c1:d0:53:0e:
3c:54:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:27:31 2024 by rpki-client on console-fra.rpki-client.org