Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
File: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer (raw, json)
Hash identifier: SOXn+NctuPiImpQbyYJYHlC7uOImKptb09ufHJ9oGh0=
Subject key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192BF7BF0CD6414AE977E5A7FF29AB063D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Oct 2024 17:03:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31350
IP: 193.151.56.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bf:7b:f0:cd:64:14:ae:97:7e:5a:7f:f2:9a:b0:63:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 24 17:03:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:18:cf:87:f2:93:7e:a6:29:de:e5:a6:6a:
24:76:fc:21:3d:e5:08:4c:23:aa:66:12:96:a9:56:
83:36:13:23:2e:aa:a4:f6:64:dc:a2:ea:2f:3c:14:
3f:ee:84:67:8c:cd:c0:7d:45:e3:c7:20:ef:5d:2a:
de:a5:64:bf:20:6e:39:8e:31:5f:67:2b:8a:fd:55:
f9:e2:56:79:64:a9:db:e8:c9:11:10:3d:24:f3:8b:
09:73:54:e2:24:25:58:49:86:b1:d3:30:0c:06:e4:
40:c6:3b:82:ae:64:e7:d9:01:30:cf:d9:52:66:b3:
48:c1:47:e4:78:0f:d4:95:26:8d:82:54:98:64:30:
0e:36:29:61:52:1a:6a:77:94:12:5e:89:ac:20:5b:
81:1b:41:54:5c:d4:70:67:8e:4e:74:9b:36:9d:7e:
96:50:0d:fe:7c:aa:92:84:f8:2e:b3:bc:c5:23:93:
67:1c:a8:7a:ca:3e:ef:85:fe:86:b0:80:a6:fe:ab:
98:82:5a:27:5c:d0:23:6e:8b:c2:43:b1:65:e7:61:
d0:e1:c5:ea:85:4f:37:79:f7:bf:63:1d:83:ca:87:
cb:66:3d:a5:7a:95:d2:30:77:39:fd:94:69:36:57:
76:1a:66:5b:90:0d:f3:c7:6d:1c:70:9f:d5:2c:9c:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31350
Signature Algorithm: sha256WithRSAEncryption
1e:60:31:0a:46:40:e0:45:cc:73:bc:bc:61:f6:89:fc:d5:9f:
99:8c:b0:58:af:cb:67:5e:6a:eb:1b:ab:32:91:09:0c:36:fa:
c0:f9:a8:82:04:f8:ce:6f:85:f1:73:df:d5:84:a1:56:81:01:
08:3f:22:d4:04:cc:19:61:51:bf:5a:ef:60:a4:ca:b2:b9:85:
c0:74:9b:f5:b2:71:e6:bd:b4:c0:4a:46:8d:99:74:5a:38:f5:
60:e1:3c:e9:92:89:8d:a3:3a:c0:6f:5a:af:d2:c4:fe:80:7b:
43:1a:15:69:ab:dd:94:0d:92:32:3a:90:2d:f2:1f:ef:a2:77:
dd:bb:f6:70:12:23:62:47:9e:e4:44:41:4a:55:78:ea:24:f6:
eb:74:f1:15:98:f9:a7:f0:c6:b2:df:88:52:79:67:95:63:36:
e3:87:70:83:38:7c:0b:5e:9a:86:a3:63:23:9b:90:af:fb:0c:
c2:d8:28:29:f8:b3:2f:9d:70:e8:d5:f4:98:c1:1e:3b:cf:3d:
70:1e:58:25:6f:74:75:88:a4:a4:95:de:64:47:e0:87:84:db:
da:99:5e:eb:df:80:88:85:5b:ab:85:a5:3e:d9:c0:0f:c9:76:
d1:5c:b2:c7:71:7a:8d:77:17:f8:4c:87:94:16:a7:41:1e:23:
24:9f:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:48:43 2024 by rpki-client on console-fra.rpki-client.org