Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
File: 1jpuJY1igPPdl6ltlIbZPULxjUs.cer (raw, json)
Hash identifier: TgC97ZCWGN+OSCkdbYk5npqniURFGgEbsXrqZAWs8Sg=
Subject key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193B0156D3C07501C57260798522561CE40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Dec 2024 10:20:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206474
IP: 185.237.128.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:15:6d:3c:07:50:1c:57:26:07:98:52:25:61:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 10 10:20:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:1a:d2:db:5a:19:08:fd:13:b6:06:55:d9:
1d:83:56:74:23:be:68:33:87:58:f3:8f:42:06:01:
c1:4e:8d:30:aa:65:61:b4:94:f4:32:ef:49:52:3b:
a9:1c:99:a8:aa:87:28:2a:f5:34:01:01:40:a0:9d:
e5:21:98:07:e7:12:9a:6e:ec:e3:92:52:52:4b:4c:
f2:42:96:09:3a:f5:cd:d0:eb:41:d2:33:01:34:f9:
5a:c0:62:d1:8f:bf:65:ea:e9:c7:72:a6:d8:22:a1:
07:91:e4:90:45:81:f1:f2:06:77:74:4f:0d:ba:8c:
6d:a5:58:7e:b9:cd:94:03:e5:36:21:d9:df:66:fa:
71:a5:1b:8a:c0:a5:ba:e4:3b:c8:a6:29:98:c7:47:
7a:03:47:66:1d:05:95:85:3d:69:1f:af:b7:43:9b:
ac:90:e7:d2:60:99:a4:5d:01:a4:c7:8a:7a:3c:33:
13:bc:0d:8b:80:96:10:f8:e7:03:32:90:78:59:34:
66:90:5a:cb:6a:46:c0:d5:84:ba:78:1b:9d:26:d6:
6e:25:d2:70:cc:dc:06:5f:c4:28:68:8e:f8:7a:ca:
cb:bf:ed:42:b6:c2:db:89:97:03:bf:d6:e7:60:45:
67:70:70:88:22:3c:eb:5e:02:d0:8a:81:d7:2c:cc:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.128.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206474
Signature Algorithm: sha256WithRSAEncryption
6b:76:40:d0:81:5a:2b:76:0f:8a:b0:4e:35:38:97:ba:23:37:
d9:77:c1:38:1b:69:c1:f0:94:fd:0e:47:3f:87:55:8e:95:b0:
ad:91:5f:8b:69:a8:b6:b1:b1:9f:2b:68:d1:df:70:18:84:c2:
e6:6f:d9:d8:89:15:e0:e2:22:4a:d7:d2:fa:5d:bc:fc:05:77:
dd:35:4d:b9:d8:55:47:9a:39:93:69:a7:f0:c2:91:28:54:45:
12:e0:ae:82:37:5b:83:2f:12:8d:44:b0:3f:63:74:86:e8:a8:
7f:21:6d:46:9c:51:0f:e9:7f:77:0b:fc:74:79:f5:42:29:74:
fc:c5:26:c6:81:9a:52:9d:01:c9:72:a5:a0:55:84:d2:c7:1e:
bb:67:d5:9b:65:cc:57:59:dd:30:c6:29:97:1f:29:88:56:5a:
7b:4d:b7:12:a7:43:12:9e:32:92:30:8d:f4:b3:14:28:9f:cf:
88:c7:24:70:81:86:31:87:f8:30:e0:06:04:b5:e7:b0:09:f7:
45:10:42:8d:02:f8:a5:64:d7:0f:28:ac:ec:61:46:09:ba:b8:
40:ce:87:79:f7:ee:d7:ea:97:13:c7:d0:d4:b6:3a:e7:cb:a1:
a3:12:74:13:50:c3:1f:58:10:c0:43:65:c1:0d:1d:f6:90:92:
2b:d8:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:50:12 2024 by rpki-client on console-fra.rpki-client.org