Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.cer (raw, json)
Hash identifier: WJstY/Jg6xhx3VtxH0dN9rS/HYxps3HBUy9pyio21BQ=
Subject key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA23B1E6FCCEF63D95E4906898C58BA4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Feb 2024 11:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59745
AS: 215518
IP: 45.151.92.0/22
IP: 80.66.96.0/20
IP: 185.198.200.0/22
IP: 195.20.20.0/22
IP: 2a02:340::/32
IP: 2a0a:8ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:3b:1e:6f:cc:ef:63:d9:5e:49:06:89:8c:58:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 11:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:01:4e:eb:b0:2f:3c:b7:97:39:58:33:94:
d7:a3:fd:ef:08:33:b4:ed:07:c7:10:10:7a:c9:95:
a9:80:c6:7f:74:b2:33:c6:9d:88:32:01:09:55:0e:
14:4c:e0:6e:94:1a:9f:69:64:05:24:6c:e7:b7:45:
55:fd:bf:38:dc:f7:3b:e8:8a:b6:c1:9b:13:bc:ec:
e0:4a:09:a9:eb:79:2f:a9:53:6b:17:6d:9c:06:82:
54:de:25:75:72:b4:92:42:59:cc:52:b5:78:7a:23:
69:88:02:6d:ac:4f:53:b0:b9:56:b5:32:8c:1b:91:
60:58:30:ec:6a:42:40:e0:ab:07:6e:8a:73:40:1d:
24:6f:70:82:95:11:03:d9:82:6d:5c:e4:03:35:5a:
43:ea:06:cd:a4:76:a8:1b:a8:9b:88:d2:d3:f6:a2:
9a:34:91:57:63:9f:e4:33:3f:c7:79:c8:6b:91:3f:
6c:73:bf:ed:2a:ea:da:46:e9:14:4e:ac:74:05:84:
cb:f0:e0:45:c9:bc:e0:95:87:04:17:06:b2:6e:6a:
c1:ad:bc:a8:6f:13:c4:c6:e2:b0:b4:72:e4:ef:0b:
7b:14:78:90:94:fc:a5:bd:4d:f0:6f:07:1c:ca:a7:
8e:1c:4a:ad:d6:ab:8c:5b:67:7b:d7:6b:f1:1b:ad:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
80.66.96.0/20
185.198.200.0/22
195.20.20.0/22
IPv6:
2a02:340::/32
2a0a:8ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59745
215518
Signature Algorithm: sha256WithRSAEncryption
5e:a4:9a:d5:aa:7f:bc:b4:09:7f:8f:05:b7:35:12:c7:04:cc:
cc:46:7f:eb:78:7c:91:81:4d:f2:79:a3:5a:63:d5:65:e0:8c:
7f:35:5d:cd:de:16:8d:f2:bb:94:52:a6:27:d8:d7:fb:e3:c4:
11:10:c8:81:e2:94:c1:7b:5a:72:6f:8c:2a:17:40:b7:c6:7d:
dd:03:01:e5:10:6d:83:58:79:22:18:98:ac:cd:18:8d:8d:f9:
f0:1f:28:00:d2:1d:34:27:2a:48:03:5e:5d:50:f0:92:9f:2d:
fd:4e:5a:95:10:95:7b:4f:b0:48:d9:37:98:fb:e2:94:04:6e:
a3:7f:6d:a5:91:05:3b:db:50:6b:cb:8a:dc:e6:57:8c:d9:fb:
ae:0a:44:0f:44:0d:16:10:3c:27:31:eb:0e:4b:ad:bd:5b:b3:
6c:a9:05:f2:1e:a4:05:c4:b3:77:60:90:0c:3b:08:87:aa:4b:
8a:cf:65:df:7e:45:65:0e:67:e2:66:58:fa:c2:3b:94:52:1d:
f8:dd:48:be:b0:d8:c1:49:ff:69:88:5c:ff:9a:c9:a2:3c:01:
f0:db:87:bd:d7:8f:fd:3a:0a:3b:09:18:25:29:b9:7b:cc:c1:
30:fb:e5:a0:11:95:5f:4a:74:b0:75:d8:c2:c9:e7:2e:f9:d0:
a3:16:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:51:57 2024 by rpki-client on console-fra.rpki-client.org