Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37VD0Px5fRcqqpw9d_lDJls5ia0.cer
File: 37VD0Px5fRcqqpw9d_lDJls5ia0.cer (raw, json)
Hash identifier: 23Zv+Fa8RuweM+4Z2rk1ee2zdmn1vwzJk2Cl3PhdaCI=
Subject key identifier: DF:B5:43:D0:FC:79:7D:17:2A:AA:9C:3D:77:F9:43:26:5B:39:89:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3490AE36293B4D71A367213840A6AF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/37VD0Px5fRcqqpw9d_lDJls5ia0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207788
IP: 195.43.159.0/24
IP: 195.47.210.0/24
IP: 195.47.212.0/24
IP: 195.47.216.0/24
IP: 2a0f:b6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0a:e3:62:93:b4:d7:1a:36:72:13:84:0a:6a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfb543d0fc797d172aaa9c3d77f943265b3989ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:1b:f9:8d:7e:39:39:38:9f:e1:34:03:34:
f6:b0:98:f5:c9:bf:05:e9:9b:b3:31:64:29:99:b5:
9e:da:dc:b1:ba:eb:1d:f3:e0:3b:20:ef:af:14:78:
cd:07:3c:b4:e8:94:fd:82:39:86:f8:9e:1a:7b:4c:
b6:91:ea:12:73:c7:7c:00:b7:af:15:62:ca:c6:37:
b0:0a:6a:cd:9a:13:67:62:4e:aa:2e:0e:b5:a4:1f:
17:40:91:74:5b:b9:1c:d0:32:0b:5c:86:40:01:3f:
97:de:17:22:35:22:4c:a2:d9:d2:ca:35:2e:4d:84:
b8:8f:77:d8:3c:45:8b:05:2d:95:e1:90:9f:8b:23:
1f:14:fc:1f:fd:74:09:65:20:95:43:60:4c:9a:b4:
fe:90:e2:8c:6b:f1:ff:cc:48:fa:b3:4c:35:93:da:
de:9c:b7:b2:68:54:6d:36:57:27:e8:fd:62:af:cf:
22:70:d5:88:d6:32:97:27:ef:b7:65:a1:16:05:02:
fc:84:02:61:8a:d6:6d:5f:98:3f:39:65:58:36:b4:
f5:83:08:cb:90:1f:53:6f:05:ea:53:30:17:14:b4:
a0:33:c9:ef:78:9d:0f:87:dc:14:9a:03:db:bd:9e:
50:84:9e:23:c6:81:41:d4:12:fa:19:c6:68:a9:85:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B5:43:D0:FC:79:7D:17:2A:AA:9C:3D:77:F9:43:26:5B:39:89:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/37VD0Px5fRcqqpw9d_lDJls5ia0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.159.0/24
195.47.210.0/24
195.47.212.0/24
195.47.216.0/24
IPv6:
2a0f:b6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207788
Signature Algorithm: sha256WithRSAEncryption
0f:64:49:12:3e:6f:1f:93:78:89:28:b7:ed:e7:3c:3f:6e:06:
ba:40:f3:67:40:2e:4d:49:b0:52:62:8a:4f:e2:12:67:09:b9:
04:a4:e1:ac:22:ee:71:1b:f9:4e:76:21:13:ec:83:bc:02:ac:
1c:1e:32:a3:44:73:f1:51:71:fb:3b:d0:01:0c:a3:e5:88:db:
3b:7c:5c:56:74:a0:e3:2a:3f:02:27:6b:9a:87:8d:91:0e:00:
50:17:4f:14:4d:90:a9:87:c5:49:68:4a:ba:af:20:dd:b0:4a:
bd:f8:a5:87:76:4f:36:2b:f8:06:6e:3d:ae:70:35:c2:66:4f:
3a:7b:89:60:0e:44:cc:fd:aa:88:6c:ed:a1:29:02:a4:76:b3:
dc:77:dd:b0:e7:88:d7:20:e2:2f:bf:5c:f0:ae:10:02:f7:3f:
6f:e7:ae:dd:36:9c:f7:2f:3b:75:86:a7:38:2e:40:a1:e7:0a:
68:e6:5f:7e:68:69:4e:db:35:ed:ef:e2:80:1f:35:9e:66:cf:
6e:ea:44:6a:57:be:95:35:ba:d5:b4:84:ca:de:ab:da:f4:76:
e7:a6:5f:a4:b7:53:3c:ec:03:24:59:70:58:a1:2e:c7:c5:9f:
4f:1e:f9:e5:db:78:fe:05:10:ae:02:5a:5b:75:c6:70:b1:20:
a3:ff:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:04:59 2024 by rpki-client on console-ams.rpki-client.org