Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.cer (raw, json)
Hash identifier: mtz35jNFJknbQz/UkWazrCRtNxZb0lCyCRUbwObTICA=
Subject key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019267234B48C44F854E75BD8342F121C2E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Oct 2024 13:20:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59745
AS: 215518
IP: 45.151.92.0/22
IP: 80.66.96.0/20
IP: 185.198.200.0/22
IP: 195.20.20.0/22
IP: 2a0a:8ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:23:4b:48:c4:4f:85:4e:75:bd:83:42:f1:21:c2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 7 13:20:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:01:4e:eb:b0:2f:3c:b7:97:39:58:33:94:
d7:a3:fd:ef:08:33:b4:ed:07:c7:10:10:7a:c9:95:
a9:80:c6:7f:74:b2:33:c6:9d:88:32:01:09:55:0e:
14:4c:e0:6e:94:1a:9f:69:64:05:24:6c:e7:b7:45:
55:fd:bf:38:dc:f7:3b:e8:8a:b6:c1:9b:13:bc:ec:
e0:4a:09:a9:eb:79:2f:a9:53:6b:17:6d:9c:06:82:
54:de:25:75:72:b4:92:42:59:cc:52:b5:78:7a:23:
69:88:02:6d:ac:4f:53:b0:b9:56:b5:32:8c:1b:91:
60:58:30:ec:6a:42:40:e0:ab:07:6e:8a:73:40:1d:
24:6f:70:82:95:11:03:d9:82:6d:5c:e4:03:35:5a:
43:ea:06:cd:a4:76:a8:1b:a8:9b:88:d2:d3:f6:a2:
9a:34:91:57:63:9f:e4:33:3f:c7:79:c8:6b:91:3f:
6c:73:bf:ed:2a:ea:da:46:e9:14:4e:ac:74:05:84:
cb:f0:e0:45:c9:bc:e0:95:87:04:17:06:b2:6e:6a:
c1:ad:bc:a8:6f:13:c4:c6:e2:b0:b4:72:e4:ef:0b:
7b:14:78:90:94:fc:a5:bd:4d:f0:6f:07:1c:ca:a7:
8e:1c:4a:ad:d6:ab:8c:5b:67:7b:d7:6b:f1:1b:ad:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
80.66.96.0/20
185.198.200.0/22
195.20.20.0/22
IPv6:
2a0a:8ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59745
215518
Signature Algorithm: sha256WithRSAEncryption
7f:12:2b:92:fe:ed:e1:a1:36:3b:91:3f:e1:dc:f1:57:8f:58:
b1:bf:d8:57:13:bd:dc:c0:03:7e:a7:37:2d:7d:93:aa:50:44:
d9:53:85:1e:dd:06:de:c9:57:f2:9a:d4:14:f5:d0:d5:d3:9b:
88:3a:95:b6:98:bc:dd:3e:47:a8:bd:5e:86:5c:8f:49:15:5d:
36:20:f0:9e:ed:2e:ee:a8:33:41:88:cb:37:85:50:2b:74:73:
8f:7f:d6:3f:93:90:62:4a:a0:5e:21:c4:be:ac:75:bd:04:79:
08:6d:33:66:cb:83:69:23:f7:6a:ea:94:7a:f6:79:99:34:ca:
16:d0:49:13:fe:cf:8d:a9:3e:1a:be:ef:fe:9a:36:65:dc:f0:
21:ed:26:0f:67:15:02:4e:6e:2d:7f:7b:0d:68:f5:1b:81:ed:
32:47:a9:f1:04:47:36:64:a3:06:0c:ca:dd:94:7c:00:69:c5:
62:b1:62:b5:ac:38:64:99:d7:3c:eb:44:94:fb:56:14:2e:fc:
a8:c2:db:bc:83:92:c5:a7:dd:02:a7:fd:32:db:7c:6d:a9:e0:
c4:85:58:8f:2f:88:a1:78:68:37:c9:00:be:2b:be:66:c3:6f:
bb:15:af:6a:b6:02:6d:43:1e:24:88:d9:fd:a4:29:bb:b9:1b:
36:26:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:17 2024 by rpki-client on console-fra.rpki-client.org