Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
File: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer (raw, json)
Hash identifier: kryqTyaE9+IRL8J76TmV09WksV7YzYTvW+3T4ymNhn4=
Subject key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B0D564337565CFB4DCD3542778DFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210939
IP: 185.237.124.0/22
IP: 2a11:9700::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0d:56:43:37:56:5c:fb:4d:cd:35:42:77:8d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:e5:ae:72:d9:8b:cc:6a:ba:19:ab:cb:94:
e1:47:1f:97:52:d4:92:e7:94:d2:72:c0:62:40:68:
cb:71:ec:7e:c4:e2:6d:4e:07:ab:6b:fb:40:18:f5:
b4:14:77:c5:0f:43:9a:8e:2e:2a:76:97:79:f0:18:
e3:54:25:a3:b6:eb:e9:5d:18:b8:ce:35:c1:f5:6c:
87:1b:f9:6c:1c:6a:69:45:6f:3e:0d:bb:b7:02:bd:
6c:11:8e:8a:23:6c:85:64:b4:93:4b:ac:b0:0a:af:
d4:04:05:8e:38:39:ee:ef:e3:5b:9e:e5:9a:88:0b:
d4:30:ca:06:38:80:9f:5f:9d:db:c4:53:75:87:e8:
c9:59:40:e3:2f:78:dc:a7:b3:2e:8a:5a:cc:ff:1b:
30:10:08:27:ed:d3:3e:b2:4c:f1:9b:ed:33:f7:14:
e6:01:11:df:c6:c7:3f:03:88:42:eb:58:8e:e2:2c:
d4:da:f9:ed:3e:23:40:82:bf:eb:d6:6f:08:a9:f8:
5d:ea:1e:4d:e2:5f:7d:11:35:d3:48:04:be:b3:b3:
5a:a1:d6:b9:84:9b:54:6c:57:eb:51:0d:a5:58:89:
80:ff:a2:88:b8:48:01:5a:e9:a9:70:ee:05:26:30:
bd:d6:de:4a:83:22:c9:45:cc:1f:02:f3:24:a1:5a:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.124.0/22
IPv6:
2a11:9700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210939
Signature Algorithm: sha256WithRSAEncryption
0e:5e:ef:a0:9e:3a:b7:42:b1:9d:cf:fe:ad:8b:bf:19:9f:38:
c6:81:46:a4:04:c3:30:22:2e:56:67:85:79:d5:f4:09:c3:3c:
37:a0:0b:e8:c1:52:a5:4b:47:0e:08:d4:6d:f9:af:47:0e:b3:
9f:df:7f:4c:72:24:34:4e:d9:99:e8:d1:c2:bb:c6:7c:2f:e7:
e1:32:2f:cb:85:c2:71:27:3d:50:eb:da:0f:96:eb:a0:dc:c9:
73:c2:a0:53:fb:48:bb:81:60:8a:70:81:56:bb:91:25:58:e9:
f4:3b:b2:36:da:a8:b9:bf:8f:2c:3a:49:f0:ec:c3:71:06:90:
c3:8e:14:43:7e:3f:51:a7:91:9c:8d:74:80:d4:28:85:1a:14:
04:53:29:e1:ec:82:c2:b7:3f:93:3b:a0:76:f5:39:ee:c9:df:
85:22:d7:55:08:6d:96:20:47:af:5c:89:44:a1:82:9a:9b:d0:
c2:44:08:96:2a:5b:57:07:e2:4a:1d:6c:c0:8b:0d:1d:af:73:
c3:38:6b:2c:c5:18:68:a1:90:7a:9b:e5:3e:a8:0f:f8:7d:ca:
9d:f2:ea:80:bd:fb:82:aa:76:16:bf:ad:6a:01:85:68:c9:ad:
aa:2e:06:00:1e:8a:b3:86:15:b7:8d:35:b5:ab:96:f3:b1:86:
97:b3:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:10:53 2024 by rpki-client on console-ams.rpki-client.org