Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.cer (raw, json)
Hash identifier: HaWO4Lzmor2KY7vU54lmWcuI46ZAzqa7TaWG//IY5sg=
Subject key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF830E1495F63E0A6C51BE054CA119CCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Jan 2024 11:03:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48732
IP: 195.200.235.0/24
IP: 2a11:600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:30:e1:49:5f:63:e0:a6:c5:1b:e0:54:ca:11:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 11 11:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5354321c1254360145eaf25f69938b8df347b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:7e:a3:4a:31:16:03:a7:2a:e3:f9:44:be:
be:07:d7:80:b7:28:a9:4b:78:ef:ee:80:55:e9:4b:
6c:49:47:fa:b4:5c:4a:69:0b:5b:30:57:6a:06:c6:
fe:85:e3:23:1a:fe:59:2c:5d:14:97:4c:67:69:da:
6d:b1:32:dc:e2:47:c2:de:87:1a:66:94:86:0a:db:
5d:7b:0b:ac:90:0d:0e:59:7a:94:53:de:2c:18:03:
02:9a:6a:28:a0:61:1a:10:71:7f:97:df:fe:69:f6:
9b:55:37:12:bd:a1:80:8d:36:7f:4f:f3:39:26:3c:
d5:1f:27:2a:62:b3:d1:2e:37:e8:38:69:1a:26:a6:
b9:eb:c9:98:9d:f5:c6:e0:91:4e:c8:1a:7a:e6:72:
e0:53:27:6c:1c:76:3b:1a:ff:3f:a4:8a:14:69:5e:
04:e7:30:1d:2f:ce:de:2e:b3:53:df:80:bf:9c:38:
50:39:bf:30:7c:ac:b3:bc:a8:2a:c6:6e:10:50:f1:
37:5d:c8:05:96:61:7f:2d:22:ef:7b:2b:bc:8f:71:
89:15:61:e8:d7:e5:f9:41:98:97:77:d3:f0:06:e8:
c7:c5:60:1b:eb:b2:c5:e5:9b:ef:7d:3d:93:1f:dd:
ad:39:71:09:38:4b:6b:da:b0:8c:62:3a:a5:9b:e1:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.235.0/24
IPv6:
2a11:600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48732
Signature Algorithm: sha256WithRSAEncryption
9a:34:1b:18:b6:d7:90:cf:64:ae:23:7c:33:47:26:42:30:e5:
73:12:4d:a5:35:1e:82:6d:e1:14:9b:f0:38:fb:9c:d2:eb:8e:
3c:35:c1:70:86:65:dc:46:f0:51:30:9c:e6:50:93:26:93:6c:
c7:59:03:64:05:bf:78:3d:8d:1e:db:3c:c1:17:50:51:9e:71:
ba:d9:a6:82:03:ec:0d:f6:b0:a2:c1:0a:20:36:58:22:c3:a1:
d1:4d:b9:e7:66:09:7a:d4:0d:51:01:50:29:96:6c:d4:ad:2c:
2d:4f:c6:f7:b8:1c:64:43:3d:05:47:91:51:54:01:cc:4d:0f:
04:58:81:8a:1d:8c:51:87:f7:a6:dd:40:f9:cc:bf:e3:30:24:
db:54:5b:c8:ce:b9:8b:b4:2e:a7:bd:46:d7:ee:de:8f:e9:1f:
48:57:1d:be:25:0f:57:1a:68:89:1b:8a:87:35:c1:4a:05:6b:
e0:02:6a:47:2b:53:55:ac:00:d3:ca:6d:76:9f:01:ea:65:b8:
39:77:75:c7:f1:04:b0:f7:1b:27:fb:e3:8f:47:6f:78:5c:e6:
ba:39:af:6b:58:a5:ae:d8:86:e1:3e:ad:6f:65:7a:06:2e:91:
8a:7c:da:16:e9:6f:fd:2e:e9:0e:48:c1:37:7c:75:c3:60:ab:
74:17:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:54:33 2024 by rpki-client on console-ams.rpki-client.org