Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer (raw, json)
Hash identifier: YhOtB78i/uUPmSuCTLT91tP/fWv6BQQL5W1JnTyb1V4=
Subject key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC155BDD50F2AD0C176E8627424355
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25376
IP: 82.148.224.0/19
IP: 185.12.232.0/22
IP: 2a00:1b98::/32
IP: 2a02:f0a0::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:15:5b:dd:50:f2:ad:0c:17:6e:86:27:42:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:75:80:0e:9d:f5:fa:37:f5:48:9a:25:15:
7c:cc:e1:8c:e2:cc:01:3e:ab:c3:1f:40:04:9f:d4:
ca:80:8c:46:9b:a6:17:7c:71:ce:f8:8f:e8:54:ce:
ce:7c:57:82:2f:45:41:a2:b8:3d:1d:0f:dd:5d:35:
a2:a1:19:c4:e0:4e:a9:92:b4:63:99:3d:08:5d:fe:
d1:fd:cf:d1:cd:eb:fb:13:ff:28:3e:f1:68:02:c1:
36:4c:6b:10:b2:26:e9:ef:4c:0f:7c:ba:23:85:56:
4e:ad:b5:37:07:8f:30:3e:d6:fe:9c:f9:fe:9e:c9:
b7:78:b1:e5:6d:45:44:94:6e:36:9d:ae:1a:2c:30:
9b:7f:da:5c:28:2b:c2:ee:5c:c9:08:10:59:c9:85:
72:c5:b5:f8:3d:89:36:67:fa:d1:72:16:b6:5d:5e:
0e:b8:a3:70:3a:ce:ff:82:98:cb:97:d6:80:4e:a5:
7b:e8:63:9a:31:f9:94:72:e1:8e:00:5c:0f:92:30:
80:ed:00:5b:16:10:e1:b0:42:6b:8a:cd:c1:ab:86:
4c:b3:ba:20:87:53:96:a5:30:ae:15:68:86:6a:d3:
53:23:19:65:17:d3:0b:3b:bd:98:fa:79:a6:93:13:
64:1d:2f:42:44:a4:2b:33:9a:b0:cd:b9:44:ce:1c:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.148.224.0/19
185.12.232.0/22
IPv6:
2a00:1b98::/32
2a02:f0a0::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25376
Signature Algorithm: sha256WithRSAEncryption
a6:19:36:da:19:88:95:09:55:47:59:97:7e:a6:34:27:b7:9c:
6b:0d:0a:ed:a0:b9:34:4e:94:67:1e:f1:c4:b3:25:e5:f4:44:
8a:99:93:ca:6f:40:d5:9c:3f:18:7b:f9:2e:ba:be:af:d3:f0:
0e:77:41:c1:d8:5a:be:11:44:a2:1b:6e:94:ce:cb:b5:f7:ce:
69:5f:37:2c:41:1c:ed:d1:e6:6a:83:c3:ee:81:2b:c4:59:60:
0d:cf:fe:3e:c6:a3:ae:0d:cf:67:93:f2:50:cd:f4:be:5f:a7:
13:32:31:11:de:d7:b1:32:ee:0e:c2:1e:f0:99:87:38:95:5e:
3d:5b:53:86:e7:04:fc:fa:30:33:fe:01:de:02:56:64:9f:69:
0d:bc:b4:02:18:f6:8c:1b:4a:d2:0a:63:58:f5:31:5f:71:b0:
d8:6c:01:32:db:8e:88:93:9e:c1:c7:79:3d:c6:21:dc:14:72:
a5:4f:ad:cd:9e:4d:61:1c:2b:58:ed:51:f4:e4:a9:f2:cd:89:
8d:ab:5c:49:63:8a:8e:6f:2e:f8:ca:d8:80:33:e0:1b:81:de:
cc:63:69:b1:b8:17:c7:07:78:ad:94:dd:04:a7:61:99:d2:aa:
ed:ee:2a:2d:7b:4c:85:2c:8e:ec:7f:e1:73:df:20:fa:54:ce:
22:c9:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:17:08 2024 by rpki-client on console-ams.rpki-client.org