Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.cer (raw, json)
Hash identifier: JN3cEHbxOPlIQk5kSyL1YSWrHgpiMr3el6JyOfhvahE=
Subject key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC35CAF8C0940CA6C64E0A443187B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207354
IP: 185.108.126.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:35:ca:f8:c0:94:0c:a6:c6:4e:0a:44:31:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:2d:ea:d9:16:47:c6:f5:d9:ea:94:b3:d3:
fb:40:7d:20:47:5f:90:46:0e:0e:8c:20:ab:32:2a:
a7:67:ba:9b:7a:9f:d7:5b:4c:90:61:a9:95:20:6e:
d5:54:df:ae:fc:ab:40:53:5a:7d:16:1b:01:13:38:
43:51:95:c7:0d:14:4d:bd:61:43:46:75:7e:a1:5b:
5f:68:79:71:a7:90:93:28:03:91:77:4d:00:65:a9:
ad:83:fe:e3:6f:28:80:5a:c6:46:e1:e1:81:19:d8:
c6:ab:57:d7:4a:a1:c4:af:dd:88:f2:78:26:43:a1:
b8:9f:da:30:7b:ab:ab:3b:26:d1:ab:e2:75:ed:60:
b9:a0:5c:0b:2a:da:74:87:67:7f:15:a3:1b:07:1f:
e5:d9:68:e6:4d:67:fd:b2:fb:8b:b5:39:8e:78:43:
22:e6:d3:15:b9:21:e1:ed:fd:66:84:e0:26:77:08:
2b:3f:cc:a0:24:4d:49:a3:d1:e6:06:22:c6:14:48:
aa:5b:8a:90:57:a2:ea:e5:40:c0:4a:96:32:34:40:
1c:4f:5b:3d:81:6c:d8:8a:4c:77:71:64:a2:ab:72:
d9:9d:43:c9:e3:8d:44:db:48:ac:c0:f4:c0:cd:7c:
b1:ea:ef:6f:f2:c4:a5:fa:90:80:f5:07:49:96:8e:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.126.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207354
Signature Algorithm: sha256WithRSAEncryption
a1:d1:2d:10:4c:de:67:b8:49:2f:6f:0d:b8:99:ba:19:3c:c0:
68:a9:e5:63:99:69:d0:eb:81:48:d9:52:94:57:0f:d0:d6:14:
7c:de:1f:52:04:09:7c:73:7b:e9:3a:63:ab:57:14:c9:ee:ca:
73:2e:f0:e1:d2:1d:d2:d5:c5:ca:4b:2e:ad:6c:f4:67:a2:76:
6f:5f:a2:59:d2:b4:24:8d:71:ba:10:c2:53:46:74:9b:39:53:
24:07:21:37:17:52:58:08:cd:9f:e8:95:2c:38:92:ec:fc:95:
21:14:ad:31:4d:7d:a6:a2:23:c3:04:e9:97:87:70:f8:66:f4:
24:7e:df:ab:9c:18:85:25:a3:1b:e3:c0:f0:e7:9b:06:6b:ff:
9e:87:45:96:f7:b9:c5:d1:c7:9d:b5:eb:47:76:92:02:1d:c5:
cc:c9:86:05:77:9a:2d:90:37:3f:a2:26:a0:0d:79:e9:a6:28:
81:a2:1e:74:9a:9c:0d:bf:cf:f3:b7:63:b8:f6:2d:8e:35:e6:
8d:4f:99:04:43:bd:21:33:32:16:86:6a:ad:0a:14:2e:fb:36:
b7:d7:d6:ef:5a:69:da:28:54:d8:f7:22:09:5f:f7:d5:f4:72:
33:a5:ed:83:c8:b7:13:6f:ab:71:ed:e0:ba:4a:dc:c3:d6:87:
47:79:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 12:37:17 2024 by rpki-client on console-fra.rpki-client.org