Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer (raw, json)
Hash identifier: 3moeSvLF7bDB2AKWWrtyh96+Eq3i0ayeW0A/7RHRXU4=
Subject key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC3C84FDF71BFD38AF541FEF48C18D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39121
IP: 193.105.126.0/24
IP: 195.66.89.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3c:84:fd:f7:1b:fd:38:af:54:1f:ef:48:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:43:80:56:98:42:33:3c:80:a7:88:bd:e2:
9a:c2:b2:f4:2b:09:6f:5c:bc:12:db:75:ae:de:8f:
0b:e3:2d:b7:1b:60:e2:9d:45:c0:ad:5b:b9:31:76:
b5:fb:ed:3a:b4:d9:e9:1d:c5:38:fb:2a:db:41:e6:
93:49:b2:18:17:ed:57:43:14:7a:1f:cd:91:ed:b7:
82:81:0e:89:b0:b1:e1:14:b0:62:27:d9:e4:04:15:
31:c6:ea:ab:e0:ee:0f:fa:19:b9:b5:52:be:7a:52:
aa:f5:a4:6c:9e:c2:e1:d1:37:c9:49:75:43:87:9b:
68:5d:4a:67:e5:b9:3d:54:dc:9b:90:5a:85:59:c8:
18:1c:0b:41:39:ac:e0:c2:38:dc:81:dd:77:96:72:
e1:e1:be:56:c1:ea:28:02:86:07:e9:80:87:f8:e0:
99:e7:73:f2:04:89:74:d6:17:75:00:27:d4:c1:3b:
0d:1c:ac:7c:92:b8:a7:59:d4:a6:01:81:d6:7e:50:
c1:4d:ca:4b:10:c3:2b:83:a6:6d:15:5b:f1:50:bb:
00:88:a9:fe:e7:97:71:ff:c0:93:3f:88:9a:0d:c6:
0a:15:f1:7e:84:af:45:d6:ed:85:2a:33:a5:36:40:
9b:15:5b:2c:66:67:b3:85:79:03:8a:1a:fe:9d:6f:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.126.0/24
195.66.89.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39121
Signature Algorithm: sha256WithRSAEncryption
9c:ff:b6:c4:09:1f:4c:c8:f2:91:f8:5a:22:d6:82:7e:b6:7c:
8b:43:2d:db:46:d1:02:fe:37:67:b4:57:e5:7c:45:08:43:1f:
2d:10:42:cf:f1:52:a8:1c:12:72:9e:c9:c4:66:51:06:7e:54:
72:b6:25:7a:b5:42:e2:bf:b6:eb:1d:72:9a:53:5d:79:a1:3a:
f4:4b:56:24:43:83:05:2e:88:c8:2c:c6:79:3d:98:69:c8:55:
4b:20:5c:82:9e:a2:7d:3c:5b:c7:6d:86:c9:d6:7a:36:20:eb:
53:48:2a:fb:ca:36:5d:7f:f0:52:01:78:2f:17:9f:5b:a7:84:
d0:4a:d3:e1:2a:3f:24:99:74:9c:7c:93:bb:76:04:f9:a2:c2:
42:ee:4d:84:06:42:ce:df:2f:d1:1d:0c:b6:f6:37:05:6d:94:
bb:a2:f7:05:f0:62:41:35:fd:87:a8:6c:8c:b0:46:80:3c:7f:
c3:a5:ed:5f:ae:fc:6a:22:19:6d:55:a3:9e:8f:21:ee:75:70:
37:ab:f2:96:be:bb:ed:32:14:dc:3b:bc:ee:dc:8d:bc:be:c0:
b5:af:22:e1:c1:da:e2:57:dc:2a:ba:7c:1b:69:ce:51:51:7d:
db:25:73:79:63:2d:ce:5d:53:0f:10:d0:9d:c5:6e:27:5d:66:
e9:f6:a7:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 26 17:14:20 2024 by rpki-client on console-ams.rpki-client.org