Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.cer (raw, json)
Hash identifier: nTAVrmgDmF1bLdZ6vwuvMlVl7O9C+DF9o7q8PqpXX8M=
Subject key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01912E5F5068A6799EBD6FE1E026D97C34FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Aug 2024 19:44:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197738
IP: 109.197.166.0/23
IP: 176.97.56.0/21
IP: 192.162.208.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2e:5f:50:68:a6:79:9e:bd:6f:e1:e0:26:d9:7c:34:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 19:44:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:9e:6d:6a:f4:74:c0:e0:42:48:a2:cb:13:
a7:74:e6:53:7a:ee:71:bc:96:ec:f5:98:1e:af:bc:
1b:95:bf:ac:ee:80:f2:e6:9b:ab:81:01:27:b1:1e:
3b:33:f8:3e:b7:b2:f8:18:1c:b5:07:8f:7d:be:5e:
df:a5:f1:ee:c3:85:8b:7d:d8:57:d3:62:01:33:ad:
2f:8f:0b:92:36:eb:b6:47:a7:d6:22:f3:c1:a2:c6:
66:d6:7d:5f:14:62:17:c9:95:e1:ae:66:11:f7:fa:
9b:4d:a5:88:c3:b3:ab:b0:71:b8:8c:85:85:b0:5a:
70:43:48:7d:de:ee:0d:26:50:17:d8:73:e3:0d:44:
06:7e:ab:0a:49:2a:fe:c4:df:d5:c3:5d:b6:18:e8:
e6:2c:e3:18:43:b0:fe:f0:08:c3:64:d6:d1:c0:8c:
8d:b2:e8:6a:cc:76:96:e8:b2:bf:b2:9c:41:7a:4c:
11:92:77:cf:99:fe:19:d4:07:c3:7f:60:2c:57:26:
3b:b6:85:d2:55:ee:03:1c:58:33:92:b1:4c:0c:c1:
88:96:83:87:76:e2:85:7c:a2:04:88:76:14:e0:eb:
db:8f:82:0b:08:4e:27:86:66:60:45:9e:88:94:27:
7b:19:ee:df:fe:44:3e:e5:32:e1:4f:4d:2b:b6:d5:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.166.0/23
176.97.56.0/21
192.162.208.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197738
Signature Algorithm: sha256WithRSAEncryption
47:50:1a:39:24:07:6f:15:46:35:59:1c:cd:d4:5c:ee:3e:76:
63:b1:41:5e:1e:50:cf:48:57:44:96:4d:67:4d:b0:0c:40:cc:
0a:8f:f4:73:a7:5e:ad:36:a6:80:ed:f6:1d:9a:7b:60:1b:58:
14:39:92:77:8c:10:78:2f:27:66:92:ac:32:e4:90:0e:41:b8:
c6:a6:c1:2a:05:6a:9e:81:53:91:c5:cf:38:dc:d9:11:3e:08:
74:33:19:55:b1:4d:33:d0:3b:9c:73:18:70:ea:01:d6:cf:68:
b9:68:01:79:28:58:7d:28:a2:4a:2d:8b:f9:a2:fa:40:69:d4:
63:5c:11:ae:6b:bb:8f:f4:b1:a2:db:e0:34:d8:c3:5a:c2:d0:
4a:b3:e0:67:25:c1:c6:6c:47:a9:d5:c0:98:2f:6c:48:a7:dc:
9e:98:fd:f3:8a:30:de:77:f5:0d:b2:41:18:7d:b5:f2:e2:b1:
b9:fd:9f:39:04:6c:c0:06:5a:57:7d:44:47:51:fa:7f:73:eb:
69:1b:44:4b:05:12:e7:a0:85:18:78:41:d9:3a:2a:68:d8:0b:
84:40:73:d7:27:0a:e5:c7:d1:a1:38:70:60:49:fc:1c:62:2a:
e1:10:b1:8f:15:18:60:26:5b:d6:9d:07:9e:ed:d0:f6:88:7f:
f6:9f:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:41 2024 by rpki-client on console-ams.rpki-client.org