Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer (raw, json)
Hash identifier: Ej55xQTDRDDQPQ1dDfO1fzebwaWtObOyWa2SdXNhENs=
Subject key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B783414C282F2AFCD08647DC71114F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43995
IP: 45.159.44.0/22
IP: 82.151.32.0/19
IP: 185.77.24.0/22
IP: 2a02:e040::/29
IP: 2a0f:7180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:83:41:4c:28:2f:2a:fc:d0:86:47:dc:71:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:83:62:ff:e2:60:b3:1d:67:bd:e7:ae:43:
98:bd:ad:c0:c0:bc:3a:58:5d:b8:df:2b:75:5b:36:
53:cb:4b:20:9b:c0:1f:f8:4c:45:11:69:c1:dd:e9:
c3:1f:78:7b:66:d3:7f:c4:29:6c:cc:06:8a:fd:41:
2e:ef:c4:df:d0:15:43:22:88:8b:18:19:b8:04:96:
ad:19:6e:b0:48:ee:57:b9:b3:dd:f9:de:61:cb:4c:
09:8b:49:e7:23:7b:9f:b0:f2:e0:01:85:d5:e9:99:
31:45:c3:b7:78:cc:68:a2:3f:38:57:f7:26:ba:3e:
76:92:10:bc:3a:73:17:bb:a1:05:8d:da:e8:76:dd:
1e:9d:4a:3b:9f:22:ac:19:ae:eb:3c:c8:7f:79:f6:
e6:fa:6f:42:66:5f:2e:36:d7:a1:66:71:2f:70:16:
4e:8b:73:bd:b4:4b:0f:c1:2e:e5:b7:cb:32:73:44:
01:39:dd:c0:f5:4d:30:12:e0:87:37:eb:8b:24:82:
11:71:b3:f1:3c:f8:9f:1c:c1:6d:6e:e1:0f:02:f7:
0f:78:bf:06:0b:d3:71:08:f6:b6:9b:37:41:40:cd:
89:48:e8:6a:20:de:94:51:9e:61:67:ba:10:01:4b:
ee:45:9b:f0:c9:e0:5b:e1:fc:4a:73:fe:49:81:2e:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.44.0/22
82.151.32.0/19
185.77.24.0/22
IPv6:
2a02:e040::/29
2a0f:7180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43995
Signature Algorithm: sha256WithRSAEncryption
14:f7:f3:e0:d0:62:f0:5d:df:18:6b:c2:ff:31:79:a9:ad:3b:
ac:9d:5a:af:00:a2:16:02:8b:0d:db:86:08:c3:b1:9e:06:c5:
eb:c1:70:24:0f:47:1a:af:1e:2e:bc:63:99:8c:95:bc:77:b3:
28:ac:8a:61:30:49:2f:4a:35:6d:ee:a6:0a:3b:29:31:19:07:
aa:27:44:6c:8a:f3:f6:dc:db:b4:fd:9d:29:dc:9a:21:93:77:
95:97:1e:fe:44:00:e3:9c:48:7d:ec:f6:07:dc:81:5e:8e:74:
b9:7a:e0:4a:81:c0:ff:88:92:89:7a:57:2e:12:c6:2f:fd:da:
dc:93:ea:63:66:aa:f0:5c:96:36:a3:26:36:2a:f9:14:61:12:
77:a4:35:07:3b:e4:64:25:96:29:70:bb:8f:7c:78:20:cb:53:
39:22:52:da:60:a0:42:39:92:cc:aa:ba:6d:bd:22:12:4f:8a:
a4:22:08:79:dd:6c:46:df:3d:a4:b6:0a:41:83:30:73:25:7d:
b9:9e:ec:9f:d5:73:61:1e:47:df:05:5a:33:e8:b9:49:cd:22:
f7:9d:9d:7e:da:23:05:c0:d1:db:84:72:0f:f5:8d:2c:d7:a9:
18:b2:3c:12:e3:52:9d:c9:88:87:40:ca:b7:5c:ca:b2:71:1f:
6f:59:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 08:31:42 2024 by rpki-client on console-ams.rpki-client.org