Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer (raw, json)
Hash identifier: MaR9Kf4Hu5SA+E7Hj1p4DzhjQ6PfFdNgT5zwILnN4J0=
Subject key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7848FEAF817821A6A2CCC05A8BD7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209323
IP: 147.78.144.0/22
IP: 2a09:24c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:84:8f:ea:f8:17:82:1a:6a:2c:cc:05:a8:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f973209625e2a03ddeecf91bb480548e5729d479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:c3:7f:43:c3:8d:dd:2c:84:d2:f2:23:e7:
04:70:a3:77:77:54:87:27:00:04:fe:14:7c:11:e9:
14:e1:18:64:fa:83:be:66:cd:4d:77:e0:ed:36:10:
ae:53:14:9b:c1:f8:30:d4:93:e4:4f:49:e8:b6:09:
ae:1f:79:77:11:b4:3b:9f:c5:3f:9f:8c:c1:fd:53:
ff:8a:0e:30:52:55:63:b2:71:03:74:d5:13:fb:ac:
7e:25:95:f9:23:8e:56:70:5b:47:b1:63:47:7e:8b:
dd:c3:41:bc:89:73:46:6e:c8:00:58:70:6d:81:a1:
03:0b:e0:ef:fe:b7:48:92:e5:58:62:58:f0:7b:7b:
ef:1a:2b:16:6b:09:87:28:06:38:b6:bc:86:60:d0:
e7:1f:71:32:24:e4:0a:2e:aa:5b:fe:f2:fe:70:c5:
6f:fa:51:23:4c:7b:9c:10:b7:41:36:60:60:8a:14:
05:34:f3:87:aa:21:e8:f1:7b:00:75:32:38:a6:f5:
3d:fa:8c:92:66:30:8e:c3:07:ac:5c:f7:dc:82:a0:
6c:8b:e0:e8:a1:87:f6:00:5e:61:62:36:12:ca:49:
1b:43:08:fe:3b:bb:c8:78:dd:78:ed:d1:d2:2c:45:
a9:fb:3b:38:d2:22:8b:33:00:a9:01:dd:b4:d4:59:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.144.0/22
IPv6:
2a09:24c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209323
Signature Algorithm: sha256WithRSAEncryption
96:b1:39:0b:9e:3e:f8:89:37:9a:1e:ab:87:8d:45:2d:0e:95:
ef:73:cb:25:b1:18:ad:8d:b2:cd:df:11:f8:8d:a7:86:0a:b1:
2d:ce:aa:33:87:29:a0:fc:ed:60:6f:de:66:87:62:3b:5a:14:
d0:18:43:01:d8:82:70:b4:20:41:33:15:60:58:c0:4b:79:cc:
54:c7:f1:80:93:cd:76:d6:4d:1e:6b:10:c8:fc:a6:14:01:97:
7e:c3:b9:a3:c4:f8:09:45:87:94:1b:61:7f:e5:c4:e1:fb:c8:
d4:48:e6:d3:a5:f0:a9:13:20:59:c0:29:60:a4:3b:1a:01:a0:
d5:1b:9b:3d:ef:5e:1d:23:3e:16:78:e1:02:02:0c:ca:f4:71:
e8:45:b5:52:27:ef:8a:ad:b8:3d:d5:af:3d:2f:1e:5b:08:f5:
ed:a6:8d:9c:3d:42:79:91:01:a4:f3:ba:17:01:c2:d0:62:13:
cb:da:1f:1d:ac:aa:f5:9e:ba:d8:74:f2:e9:2a:9e:1f:74:99:
ac:e2:6a:e3:95:44:7f:90:1b:aa:a1:96:a8:e5:63:08:3e:ec:
0b:41:61:17:98:70:09:a1:9c:0a:20:bb:54:40:d8:15:a6:e4:
91:3a:a6:e0:30:d2:50:7c:d5:16:63:37:eb:7d:23:9a:21:b8:
88:7e:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:21 2024 by rpki-client on console-fra.rpki-client.org