Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.cer (raw, json)
Hash identifier: cwXyNj02CcEKQL6UttDIs57q246brWS2ZoP/iWI0/mI=
Subject key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7276AD85504B9DC5F9F912922E47F67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197690
IP: 185.35.172.0/22
IP: 193.104.37.0/24
IP: 2a00:b060::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6a:d8:55:04:b9:dc:5f:9f:91:29:22:e4:7f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:74:50:5b:52:25:b4:31:53:ac:db:9f:86:
b3:89:71:92:4f:9d:86:03:8e:73:83:ce:cb:31:6b:
26:87:98:53:f8:fa:eb:c8:6a:77:0c:e2:04:2e:c4:
76:b0:88:a6:40:24:81:ee:12:04:35:c5:ed:99:1d:
9a:d3:0f:ac:93:01:ac:87:2c:6a:cf:2c:cd:29:d1:
80:e1:72:b1:a8:7f:99:58:af:2e:31:c7:1f:67:36:
7d:34:67:ae:c9:f0:90:9c:5a:1c:5f:61:32:c0:1c:
a2:0a:8e:e2:42:21:2c:23:9b:2e:0e:53:2f:33:74:
dc:2c:1b:49:ee:c9:ac:45:e6:0f:c2:9f:9c:dc:a9:
f5:fa:a1:af:7f:3b:b6:1f:fb:f5:d5:7f:38:73:e7:
43:86:a3:80:cc:cf:c0:1d:ec:da:c1:28:1f:09:3b:
67:b8:32:c7:69:8a:ed:53:c3:09:83:f6:78:e0:f1:
bb:c1:5a:e4:c6:26:2d:e8:42:b4:ed:62:a8:3c:23:
13:12:1d:7b:ff:30:ef:02:ed:bb:3f:2c:5a:51:55:
64:6f:a0:d1:a5:2a:d1:ce:ac:71:f8:fe:49:47:4e:
44:1a:ed:eb:d9:f6:15:06:b4:93:b4:da:7e:4d:e8:
be:49:d7:45:67:8e:96:80:cb:3b:e7:0b:71:a5:47:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.172.0/22
193.104.37.0/24
IPv6:
2a00:b060::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197690
Signature Algorithm: sha256WithRSAEncryption
40:cc:f3:cd:ad:53:2b:ad:13:04:c4:b6:3e:61:02:94:20:65:
75:2e:14:ac:94:63:37:bb:92:35:34:7a:9d:94:e6:f1:5d:3f:
b6:f8:1e:9f:f9:b1:e4:58:6a:ee:38:57:4c:fd:d7:28:16:f7:
89:39:ea:38:78:2c:5d:44:c5:28:e2:e1:32:83:e6:f4:57:36:
63:71:71:48:9d:40:94:74:3d:11:72:01:2e:a9:f7:c2:5c:6c:
52:38:da:9e:a1:b0:0b:36:0c:69:9e:8f:04:d2:1b:64:08:f8:
86:c8:3d:ec:e1:71:04:63:6d:43:3d:07:97:ea:55:cc:d6:fe:
da:ad:34:53:7d:a6:79:f0:77:a6:1e:ed:f0:b3:15:c9:46:d4:
9f:c0:fe:0d:c2:50:20:dd:21:41:34:0b:9b:e3:88:43:05:8f:
e0:2d:73:e0:2c:bb:5a:f1:aa:d9:dc:a9:df:c8:d1:f5:70:7b:
04:17:4f:1d:12:4d:a0:81:03:05:a9:56:7b:aa:a4:7f:6f:4b:
89:5b:6f:c4:76:31:1c:68:69:93:77:08:fc:ae:1b:84:56:04:
4a:ca:1f:e8:70:28:06:a1:2c:ce:4b:aa:22:a2:a2:48:84:f7:
0e:30:42:59:04:de:89:a2:ee:40:e7:4a:a8:e7:2e:f5:f5:9e:
ab:a7:97:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 08:04:40 2024 by rpki-client on console-ams.rpki-client.org