Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.cer (raw, json)
Hash identifier: rzUVhUqSIUaHbexlH5FR5kuXfw9vom1hQva9tXD0e/w=
Subject key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D39125A7046863011836436FC4D23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51080
IP: 178.249.176.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:39:12:5a:70:46:86:30:11:83:64:36:fc:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:aa:0a:f8:bf:69:2a:39:33:28:20:8e:c5:
57:a7:29:2e:0c:78:14:10:2a:76:db:d5:7b:a8:de:
4c:7f:90:d0:7a:4a:f3:61:ec:7c:5a:90:21:1e:8f:
dd:57:e1:10:85:d9:43:58:4c:36:19:93:18:97:35:
b6:0a:79:c7:b1:28:18:58:c0:4c:16:69:5d:5a:f1:
cb:0a:cc:fc:08:6f:8e:4b:1e:f3:2d:8d:13:08:d3:
f5:f7:0f:29:6a:bf:f3:06:28:33:67:fc:57:28:7b:
39:fb:b1:e6:4c:31:2f:6d:b0:d3:31:a3:1c:92:09:
24:fa:95:62:2b:63:e2:60:6a:d5:a0:7a:9d:14:5a:
cb:e3:84:96:1c:b1:89:37:be:4d:f3:c1:e6:ce:49:
79:d8:83:40:79:23:2b:32:60:44:de:99:45:48:58:
dd:87:08:30:43:70:bc:2c:4f:a4:41:f5:83:ed:0d:
4f:54:8c:32:86:ed:09:88:51:11:f2:5b:09:fa:03:
e1:3e:c1:88:e0:14:42:ee:38:56:27:3e:16:47:38:
02:e6:ea:59:9a:b1:78:19:76:a6:47:63:43:3b:97:
b9:8c:36:c5:e8:5b:31:38:cc:bb:56:99:c7:03:57:
1c:5d:56:89:e3:8c:3b:63:37:82:86:9b:c8:0f:8a:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.176.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51080
Signature Algorithm: sha256WithRSAEncryption
83:df:67:e7:fa:13:f6:e1:75:57:11:68:b7:f0:c3:20:13:6a:
7c:a7:20:ce:af:ab:61:e2:30:8b:a7:a8:70:92:11:80:91:7a:
c2:69:c3:af:1d:f0:1d:5d:24:77:df:70:bf:ad:73:55:67:68:
17:39:14:80:ee:66:75:55:73:fd:05:f7:28:c3:92:e8:72:9e:
26:7a:d4:26:12:0a:3e:22:d3:b5:5c:32:63:03:b2:94:f4:f4:
e7:fd:90:37:56:b0:89:7e:5f:7e:17:9a:79:92:56:99:d0:b9:
00:16:03:9b:dc:4d:33:0e:90:2a:81:48:36:46:f6:a8:67:ec:
73:7e:6f:5b:6b:3a:91:08:03:f1:77:d9:7b:cf:03:35:c4:70:
a9:e3:f6:3c:d5:be:1c:93:5b:48:da:7f:21:35:c5:ac:a2:23:
f3:90:22:c0:97:94:ae:59:66:75:58:71:ae:e6:89:5d:15:81:
01:f3:5d:f7:5c:5b:0a:d0:7d:23:fb:d5:1b:d8:0a:1c:23:db:
74:3c:5f:a7:7f:71:fb:22:4b:39:aa:15:99:b2:d7:5b:a5:36:
28:6d:75:57:08:28:a5:b8:93:71:96:a8:93:03:81:8d:64:3a:
15:c0:31:09:d6:ce:ed:68:07:bd:00:f3:5d:f8:26:81:5d:7a:
bb:0e:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:00:11 2024 by rpki-client on console-fra.rpki-client.org