Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
File: 1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer (raw, json)
Hash identifier: ryh9w73TLCFJlFgJPcbJJmZ93jQxY0GXPk0G94w0Jxw=
Subject key identifier: FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E209DA5BE031A4721B56BBF4E1952
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212629
IP: 185.145.108.0/22
IP: 2a07:48c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:20:9d:a5:be:03:1a:47:21:b5:6b:bf:4e:19:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:bc:f1:52:eb:9e:7c:cf:11:98:db:d8:62:
72:2c:10:e7:fa:7b:2a:3b:14:66:78:b1:68:92:9a:
13:33:f3:22:9e:10:12:70:49:56:aa:2e:d7:2d:cf:
56:fb:29:a8:dd:d9:4f:b9:3d:da:36:a7:e6:06:0d:
4e:d1:0b:56:63:e0:45:16:3b:33:0b:e6:94:b7:76:
c4:68:17:6a:ea:fc:2b:c9:9b:2c:0f:d7:92:66:6d:
0f:2d:14:df:a7:b3:7d:52:cc:ff:7b:c3:bd:ed:27:
57:ba:3c:86:41:29:60:c1:5b:bd:21:6d:b6:e6:d6:
db:95:b1:97:e5:b2:c9:b7:2b:73:57:5b:11:2e:a2:
65:e4:34:79:26:06:37:b6:7f:f4:7c:d4:6f:73:ed:
7d:71:d3:18:30:fb:c6:37:58:38:f7:24:53:9a:d9:
a4:d9:2a:13:29:1e:39:dc:5c:ce:fb:9d:56:ad:a8:
5d:d6:61:22:b8:0a:85:da:1e:94:4d:23:1e:3d:30:
48:c2:08:8f:ad:07:ca:d5:62:fd:8a:2e:66:9f:54:
c4:d4:78:e3:86:6b:d9:f5:28:a8:65:ba:db:b3:f1:
42:bb:7c:c9:65:db:cf:45:7a:c7:97:0b:6c:13:cb:
75:8f:74:52:ed:f6:e4:10:14:65:50:1e:f1:f5:14:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.108.0/22
IPv6:
2a07:48c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212629
Signature Algorithm: sha256WithRSAEncryption
3e:3d:29:10:84:87:90:bf:cc:42:f6:b5:0f:23:9d:17:3e:e8:
8e:bd:70:c8:5b:09:92:12:aa:2a:9a:41:7b:b4:2c:2e:fa:d0:
83:bb:06:0b:a9:00:1e:f3:ef:8d:28:68:5d:db:3e:f3:d3:34:
24:b2:3c:48:81:d7:27:21:08:85:64:45:5b:96:0a:be:1f:f6:
23:e6:54:94:a6:ba:d7:fe:83:f1:b7:da:90:c0:e9:0f:91:94:
84:3c:f7:fb:62:79:ed:c3:57:13:bb:4e:84:5d:3d:76:90:38:
77:3a:1c:80:a5:c7:91:79:0f:5b:f1:61:ad:86:4c:0f:39:3e:
be:c0:a3:b9:f9:0f:5c:fc:08:75:6a:85:48:30:0e:36:ae:f8:
6e:2c:68:74:88:a1:ed:22:4c:90:29:07:8e:ea:57:63:50:97:
e3:62:c5:ad:63:04:65:29:cb:b4:b7:72:07:c0:9c:a5:ca:00:
4a:a2:25:c9:3b:b2:c7:cd:03:35:ff:c0:77:90:78:ca:09:a0:
5d:35:49:6f:fc:bf:83:23:61:0e:11:27:a8:06:74:1a:28:94:
ee:87:c1:7f:66:4c:7c:fa:3e:30:46:1f:03:5b:ad:27:2d:31:
b8:85:78:09:16:f7:9f:1b:f8:ee:fb:c5:86:df:8c:e8:f5:30:
45:f5:2b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:28:25 2024 by rpki-client on console-fra.rpki-client.org