Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.cer (raw, json)
Hash identifier: pcJaJl8PLS0bN8AdhpiU+VpZG6eKHYa1rhMvPiVQxRo=
Subject key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D826C944CC1DD352917F11180B2AEE35D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Feb 2024 07:16:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206291
IP: 185.188.44.0/22
IP: 2a0b:b780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:82:6c:94:4c:c1:dd:35:29:17:f1:11:80:b2:ae:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 07:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:a8:d9:1d:63:c9:e2:9b:a8:10:8d:c5:22:
b8:44:7e:a4:0c:54:a0:ec:dd:ae:ad:34:5d:3c:98:
87:6c:32:48:69:f8:6a:7e:b9:d8:6e:ca:58:5d:c1:
a4:7c:40:46:f4:a9:a1:58:66:39:af:e8:dc:50:0a:
c1:6a:3f:26:85:f3:a2:c0:aa:5f:5f:ee:cc:09:08:
e1:e3:96:44:f4:c7:56:e2:07:0a:18:97:62:ba:03:
17:f9:46:e4:d1:fd:84:8c:5e:6f:d0:9f:d5:d3:d6:
a0:52:1f:b6:ef:b5:fa:c4:be:30:ff:3a:6d:2f:25:
ee:bf:45:cc:b8:55:85:1e:3b:42:b3:ba:42:5d:0a:
bb:2c:dc:8a:af:e0:2b:86:4c:23:ee:54:ee:50:fc:
2b:f6:99:96:6b:c6:ec:f1:5e:04:b2:3c:34:c3:27:
fd:90:24:38:6f:d3:3c:bb:7f:18:4b:68:35:fa:33:
40:2c:65:96:73:18:4d:5f:f8:63:5c:db:83:0b:24:
85:4f:62:87:e3:bc:3a:ed:dc:0f:04:cf:49:b8:ca:
27:08:1d:cb:c8:31:03:d0:6f:1d:d1:01:f3:d9:ca:
db:1f:76:fb:6c:3c:79:4c:91:b8:d5:f9:c7:9e:0f:
d5:5a:28:86:26:20:e8:c2:0a:46:34:46:ec:a6:2b:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.44.0/22
IPv6:
2a0b:b780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206291
Signature Algorithm: sha256WithRSAEncryption
6f:a8:8e:66:36:f9:1e:f1:2b:a5:1b:a1:90:43:76:07:e6:75:
e0:2d:cb:a6:85:14:4b:73:6c:ee:b6:b8:56:68:ee:68:3b:62:
43:dd:95:5d:3f:36:28:2e:1a:56:04:dd:96:c7:78:cb:90:7d:
70:c6:31:4a:6d:7a:6e:79:50:48:b2:54:28:1a:a5:38:75:e3:
d1:7d:1b:12:f8:fd:07:80:63:f2:43:b6:f3:e3:03:41:92:9f:
9c:2f:fb:17:4a:a9:e2:2f:08:71:96:11:75:4c:da:14:63:ad:
cf:27:f1:3d:84:44:65:4c:76:5d:5c:d7:bb:cb:53:9e:e3:d9:
75:3c:bd:d9:2c:b7:6e:60:ea:bf:ea:f6:f1:ac:ce:5b:4a:1a:
24:06:62:4d:a4:95:b9:79:5c:11:56:59:11:19:03:35:73:78:
31:20:f9:28:77:b6:05:63:9e:80:49:83:f8:28:59:a6:50:5f:
f9:2b:cc:8c:f8:d4:75:46:a8:51:34:65:5c:47:d4:95:04:6e:
44:90:1b:2f:8a:2a:1d:09:89:d7:a4:0e:45:c0:45:20:6e:49:
1b:2e:f8:eb:3c:81:5c:7c:ae:8f:a9:76:03:93:6b:94:b9:6f:
00:3f:30:25:bb:ac:63:83:8b:44:67:ee:f6:1a:b4:75:ea:c2:
ef:06:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:12:28 2024 by rpki-client on console-fra.rpki-client.org