Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer (raw, json)
Hash identifier: OcnmCIadBLJoIOClU5d9hFG0+eLdzHA8wn8HH3pDCXQ=
Subject key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B92BD7210DAB7024DD70549C0D3856
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204146
AS: 204155
IP: 194.31.112.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2b:d7:21:0d:ab:70:24:dd:70:54:9c:0d:38:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:86:96:43:18:47:7a:bd:d4:a2:f8:22:40:
1a:26:05:00:35:ea:e4:74:e9:9f:b5:0e:41:ce:cc:
4f:28:7d:e4:03:45:38:90:7a:93:d8:11:4e:f7:70:
4e:d1:2a:e5:27:de:71:f4:55:e6:07:b4:9c:8f:87:
db:1a:52:de:3b:4f:bc:92:83:db:1c:43:f0:ec:93:
2f:fa:04:39:05:3f:2b:39:80:6b:0e:a4:0d:2b:e8:
74:7b:71:98:3c:0f:7f:c0:df:44:35:25:04:78:b0:
75:1e:c4:8f:1f:e3:78:f5:a2:ef:67:16:39:0b:2e:
c3:cd:55:fd:df:1e:b4:68:57:fb:62:74:c2:61:13:
05:13:e2:4c:48:47:b1:ca:fa:36:28:12:e1:e1:96:
c3:02:f5:c5:2a:d4:48:9a:1a:88:da:1b:ef:9c:1e:
59:67:6c:d7:c6:26:ea:9d:25:03:62:81:cc:d0:d7:
cb:5c:fe:9d:a1:a9:3f:68:f1:d6:17:a2:c6:3b:ab:
b5:4d:b5:c5:63:61:06:05:8e:57:16:8c:60:35:c0:
70:9d:53:2a:b4:fd:c6:b6:63:15:f6:ca:d6:8a:21:
13:6f:6a:88:77:3e:2d:f1:8d:3e:17:c4:f4:f0:49:
5a:35:11:44:94:5b:23:35:b3:8b:90:e6:54:bb:8e:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.112.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204146
204155
Signature Algorithm: sha256WithRSAEncryption
94:b1:0e:fc:2c:2e:45:3a:ad:5d:20:e1:09:f8:f6:b0:cb:4d:
bd:c2:f1:2d:8b:84:8a:c2:5e:3e:65:9d:21:ab:16:e4:b6:29:
73:26:87:d5:79:f5:c0:66:6a:5d:0a:48:e4:8c:cd:dc:84:d1:
6c:c5:5d:32:90:ad:b7:02:17:2e:5d:67:fa:6c:c8:2d:f0:f1:
e8:0f:db:d9:9e:e0:75:db:cc:c1:10:3e:8f:98:10:0e:d2:b5:
77:a7:e9:27:8f:5e:1c:f5:9f:b5:69:bb:f9:f3:18:1d:62:86:
b5:b1:1a:c1:2b:82:1c:dd:81:8f:4f:c0:cb:97:6e:d7:db:47:
14:9b:f8:e9:eb:ea:ae:dd:44:79:d9:f5:a7:51:d9:aa:b4:d1:
3a:8a:ac:8c:fb:90:fd:2a:f1:4e:fd:bc:f6:91:5a:2a:f8:9e:
e1:50:87:97:6c:12:6a:75:8f:ee:44:4b:c3:32:75:dd:3c:d0:
13:60:91:f2:49:ee:77:48:33:81:72:23:d6:c4:59:42:6d:e2:
81:4b:0d:5e:44:40:86:6f:4b:3a:a3:0d:26:3b:1a:a5:72:95:
95:6f:e1:5d:c6:76:81:f2:ca:72:4e:70:97:1a:4d:c6:62:3d:
46:0d:c4:f6:68:ee:fd:ed:be:c4:06:d4:90:84:84:a9:55:65:
f1:28:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:54:06 2024 by rpki-client on console-fra.rpki-client.org