Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.cer (raw, json)
Hash identifier: VaTl6k6LfR1EbCRHxcUDWxFdz5IGVRgpIbzZwftl+x4=
Subject key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7950F7222D15843176CCF808490FC32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49478
IP: 91.234.164.0/22
IP: 194.150.254.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0f:72:22:d1:58:43:17:6c:cf:80:84:90:fc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=000a6718d539155c27300401f2c4667513eec5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:70:ad:f8:d8:d0:1b:9a:dd:91:a7:f5:39:32:
d3:39:8a:f2:04:a8:eb:d9:f3:10:9b:72:fc:30:8b:
f9:36:8b:5d:be:b2:d0:82:d8:51:7e:ea:69:08:8a:
f9:3f:63:3d:27:bb:d1:75:a2:7a:15:3e:08:50:5a:
d2:d6:6e:09:3f:b6:fa:3e:9a:a6:5c:79:87:66:5c:
f9:d8:4f:24:1b:dc:9d:a5:9a:0c:4b:13:45:58:30:
47:8a:1e:d8:ac:36:e1:d0:44:1b:64:46:c4:8f:2e:
b2:83:cb:47:d5:f5:e7:e9:31:76:ed:84:53:6b:36:
59:0e:16:89:38:90:4c:da:2e:e3:df:f6:0a:0c:c7:
91:b7:95:85:e4:e1:9b:d0:e0:45:b2:6d:46:54:97:
c0:20:14:61:73:4f:98:46:f3:de:bd:03:d6:18:ec:
63:f5:50:5b:af:97:42:a0:85:f9:81:70:24:6c:6a:
db:8b:fc:26:1c:88:59:a0:bf:96:f5:d2:40:12:0c:
a3:0d:80:46:26:25:ab:a6:5d:2b:a6:7b:30:9e:6e:
5e:55:05:5c:6c:5f:64:ec:7f:6e:42:5b:02:c8:06:
07:db:78:df:22:bf:4c:97:29:c3:ee:07:99:1e:09:
d0:06:e5:1c:a7:26:b6:2b:6f:90:34:2b:37:fe:1d:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.164.0/22
194.150.254.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49478
Signature Algorithm: sha256WithRSAEncryption
7a:7d:96:43:28:99:53:1f:b7:f6:74:81:ed:a7:b9:f6:28:1e:
38:c9:88:2a:1e:3d:a4:47:f1:8a:f7:9b:17:c9:ce:af:3d:33:
d5:7c:e3:89:2b:3f:9a:e8:bf:e1:35:10:ab:77:70:82:c8:66:
c1:9b:25:b0:db:28:9c:83:2d:b4:7d:df:02:52:c8:cc:8f:45:
e0:74:22:51:2f:2e:4c:57:3a:65:37:8e:7d:62:d3:1f:a2:05:
b3:90:f2:b8:17:72:7a:e0:42:b2:68:02:2f:c9:9a:bd:62:da:
7b:f3:3f:d7:4a:24:1b:a2:2e:95:19:77:13:07:61:43:72:e7:
5b:da:e5:2e:35:4a:c5:60:c8:db:0d:af:01:6f:46:02:55:b4:
a0:f0:a1:90:13:86:f2:35:61:64:e2:64:a5:b0:66:9f:62:65:
d7:42:53:63:70:47:06:62:95:4d:e9:23:52:57:e8:b4:76:23:
32:03:df:69:1a:d2:1d:2e:e0:c6:40:24:25:df:03:83:02:3e:
c8:c6:fe:73:fc:e1:ef:7c:6c:43:b9:4b:1c:a9:dc:8a:70:62:
3f:a0:84:db:ba:be:08:0d:5d:91:2f:2f:70:77:6e:59:32:70:
34:63:15:68:c1:2f:75:c8:5e:23:cb:24:69:28:28:bc:3d:e5:
47:33:f8:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:56 2024 by rpki-client on console-ams.rpki-client.org