Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
File: 4Gkduvo6jeBwsHAi3prfdDQftPI.cer (raw, json)
Hash identifier: 5LIqWBO0hxRRB5s0T1en3HIIOA5Z2dpRq/6l4mvcEjU=
Subject key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7F67053AF0A7C94B761D2260B335D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210474
AS: 212036
IP: 185.226.97.0/24
IP: 212.23.216.0/24
IP: 2a10:a780::/29
IP: 2a12:2e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f6:70:53:af:0a:7c:94:b7:61:d2:26:0b:33:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:bb:2a:76:2a:6b:9f:8b:2b:c0:99:9e:4c:
0a:42:c6:be:f3:ae:83:c2:76:66:dd:b6:e4:ea:b7:
e6:c6:8c:ce:53:b7:86:13:37:6b:d3:0b:07:47:db:
af:b7:c3:17:e7:32:a6:e5:4e:19:79:13:dc:f1:00:
0f:03:ec:01:e4:56:30:89:1d:67:11:89:ae:f1:57:
29:f0:7a:fb:70:54:e9:36:07:80:c4:dd:4a:e9:0e:
50:05:70:5d:7d:06:fb:c8:fe:98:f2:c5:ae:1f:53:
b3:23:91:d0:be:6e:af:36:e1:22:bf:16:6e:77:43:
30:98:6d:f4:57:e9:10:20:00:85:23:e9:4a:29:cd:
01:2b:13:44:f5:51:d5:58:b9:e3:c9:7d:0d:00:b7:
1b:cf:e3:ea:1d:8d:12:84:19:28:a0:91:7f:e3:9e:
15:24:b0:37:0b:35:d0:32:f9:a1:e9:d8:36:32:cb:
e2:e4:bd:57:06:fc:a4:68:e4:4f:16:e8:39:29:53:
be:63:a7:8c:41:7d:fd:6f:ca:82:2a:fa:4a:23:e8:
07:3a:bb:40:eb:53:6b:ba:7b:e3:10:a2:cd:6c:cf:
b1:14:c2:4b:5e:b0:67:78:81:90:da:b0:86:03:bb:
28:2d:89:f9:24:da:a4:02:65:32:05:55:94:62:14:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.97.0/24
212.23.216.0/24
IPv6:
2a10:a780::/29
2a12:2e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210474
212036
Signature Algorithm: sha256WithRSAEncryption
68:b3:43:12:db:cb:77:b0:a1:e3:c0:17:e4:6c:49:06:c1:4c:
b2:66:bc:bd:01:72:fb:56:16:7f:4b:57:9c:64:d6:2d:e9:1d:
f7:7c:2d:e4:80:89:ea:50:8d:5e:d7:87:9f:e3:40:05:5a:6d:
d2:f1:18:3f:23:e2:da:0f:09:59:db:a3:39:ba:0a:7f:b1:af:
f2:13:55:1f:33:a6:9d:e3:fe:ad:43:d0:d5:33:82:bf:ed:44:
b6:30:1f:ef:42:1c:11:9d:d9:dc:94:b2:e5:1b:70:88:a7:26:
b4:27:fd:2c:9d:c8:47:72:9a:cb:0c:f0:1f:2c:67:e9:c6:30:
a7:b0:2b:52:e3:32:67:58:e6:9b:17:de:b2:f9:59:16:67:46:
25:d5:04:4a:c0:47:88:a9:84:e0:e5:be:5c:93:d7:18:78:f5:
56:a1:f1:5d:a4:55:d9:ea:a8:ad:8b:c5:de:ed:f6:e4:91:5a:
5d:f1:17:28:a2:44:e7:51:07:03:b6:73:ba:c9:b7:e4:3e:21:
fc:f3:a7:45:15:7a:42:f2:8c:df:32:66:1d:ba:2c:e3:17:e0:
23:d8:51:fb:a5:86:33:72:0d:38:87:0b:ba:e4:af:f4:cc:09:
7a:66:12:f6:5b:27:c4:da:59:6f:22:72:12:70:3c:57:1e:87:
ff:20:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:01:31 2024 by rpki-client on console-fra.rpki-client.org