Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer (raw, json)
Hash identifier: i2jBmWd8i9Xbbf8zW71d23nXdwle36Bsis5WjD44kLY=
Subject key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80113018D3F51FB5C64403FDAF44532
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199469
IP: 185.15.112.0/22
IP: 2a03:c240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:13:01:8d:3f:51:fb:5c:64:40:3f:da:f4:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:a6:a9:80:2d:37:54:2c:ad:87:7a:e8:9e:
1f:8d:98:ae:08:51:ae:59:ae:ec:ce:49:c5:40:5f:
2f:80:ba:9a:1b:b3:09:3c:fd:1d:b0:09:c6:ee:63:
46:ba:3f:6a:dc:cc:29:f2:ea:36:17:e6:3f:69:a1:
80:98:15:e2:10:9f:f8:7b:3c:b4:5c:0f:b7:4a:b5:
0d:24:45:52:de:26:57:bd:42:87:25:3b:be:7b:a2:
bd:05:1d:ed:9d:e3:ba:c9:72:55:ad:68:7f:61:1d:
bc:e9:77:7a:cf:9c:87:9c:d9:fb:3a:80:b7:26:b4:
c8:9a:72:00:5a:00:e8:c0:87:73:15:30:da:e0:e7:
27:e7:1d:62:dc:32:a8:dd:78:0f:29:24:07:81:d4:
3a:c8:ee:07:98:a8:75:f2:0c:25:d7:1f:39:0e:fa:
a8:64:af:bc:8b:e4:87:8d:90:69:30:88:3c:e2:a5:
3b:8f:6b:9a:b8:f0:c6:4f:37:86:72:58:6b:9a:8c:
75:d5:2d:84:64:0d:fd:d7:39:2a:65:4d:b7:ee:c0:
7a:ab:f2:16:81:29:b2:e7:7e:46:a0:9c:8a:b8:29:
f4:2a:bd:68:25:01:a7:ef:1f:7d:8f:ef:37:fb:b6:
a1:a1:aa:9b:e3:66:bf:31:29:c8:0a:eb:d7:90:c4:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.112.0/22
IPv6:
2a03:c240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199469
Signature Algorithm: sha256WithRSAEncryption
2d:13:76:08:90:ca:80:c7:7a:e9:9f:01:20:ad:6f:8d:dd:e9:
dc:3e:8f:b5:48:ba:80:70:cc:08:b2:41:65:87:be:08:be:af:
f8:d2:02:d5:c2:ca:a0:05:33:73:0e:f9:76:c2:4d:ae:27:2f:
93:e1:4f:85:21:ab:0e:d2:51:4e:65:24:10:a9:46:10:91:5b:
de:8b:5c:27:c3:14:7e:cf:91:07:f9:9b:ea:58:d1:43:74:39:
e4:46:70:66:87:e9:87:23:03:e2:bd:92:6c:42:b0:89:b6:bc:
da:fc:31:25:ad:cb:d6:00:a1:d6:ef:c2:92:b1:8f:4e:83:c2:
78:5f:de:39:e3:80:32:42:34:fe:b9:4a:79:a9:59:10:d5:7f:
b8:4b:29:cc:d5:24:8f:f1:d3:ed:31:a8:3e:c9:73:f3:87:5e:
e2:f8:6a:bd:29:f3:bf:f5:64:3d:f3:c3:2c:c4:d2:a6:20:50:
fd:01:31:e4:e3:3b:04:90:cd:c7:2d:89:f2:1d:b9:ca:a9:ca:
ab:24:fa:95:58:00:23:bf:ef:83:83:7d:1e:d4:87:ea:f3:a8:
4e:47:97:7b:74:ff:ef:b4:0a:61:4b:57:1b:2d:f1:25:74:ba:
35:6a:b5:a1:d3:4a:eb:91:49:91:2e:a4:9b:0d:d2:0a:cf:ca:
f6:3a:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:49 2024 by rpki-client on console-ams.rpki-client.org