Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer (raw, json)
Hash identifier: QJOhMu6YUhFZojOhvCbrXj5z+noIClxi6eKB+Ikiwys=
Subject key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727710B5CD1D939C1929708DB914986
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205854
IP: 185.185.188.0/22
IP: 2a0b:6080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:71:0b:5c:d1:d9:39:c1:92:97:08:db:91:49:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:86:8e:a9:26:ef:4b:9d:1e:63:71:c3:dd:
15:ee:2c:f1:22:bb:8a:a7:8d:c9:12:91:36:57:1f:
b6:a3:e9:9f:3b:55:97:ea:b5:6a:04:20:1d:bf:e7:
b4:35:fa:a6:fd:99:28:47:95:29:d6:51:93:9f:28:
cb:37:51:df:94:8d:c0:1e:56:12:52:92:85:52:4b:
15:a2:47:25:04:b8:19:35:c0:5b:ff:14:0f:9b:4c:
49:05:4e:43:b6:26:b5:59:fb:e9:44:cd:84:a8:9e:
ad:04:0f:82:cb:4f:02:08:20:51:b7:e7:e5:26:9c:
0a:6c:61:65:fd:22:cd:30:c2:3a:35:c2:35:de:9a:
ab:41:eb:5b:ef:3f:bf:86:a2:b6:07:e4:87:c9:9e:
65:61:52:d7:db:aa:ef:70:bb:c7:b9:a3:b8:10:0b:
43:90:0d:d1:cd:53:b8:27:db:33:55:75:ee:31:76:
c8:67:a0:e5:d4:d5:4d:12:c9:c2:6a:0a:f5:01:32:
aa:6f:fe:36:f0:ae:84:d9:f4:d2:7c:ca:16:d8:2c:
67:9b:87:18:ed:65:85:31:7c:e9:d2:95:27:f9:78:
a8:17:7f:47:f8:89:36:d1:be:18:a5:a1:d0:5e:37:
81:8a:3f:fd:a1:df:77:f7:e8:ec:4a:90:dd:ff:89:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.188.0/22
IPv6:
2a0b:6080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205854
Signature Algorithm: sha256WithRSAEncryption
60:38:e5:41:29:b6:cb:b7:67:4d:cf:86:01:93:81:2e:33:c1:
82:a9:77:e7:48:7d:c8:87:4a:b1:8e:a0:12:a5:09:d8:6a:09:
74:5e:84:f9:56:b9:f4:cc:8d:90:07:8a:8e:95:3b:d1:59:0c:
b4:dc:73:b2:7f:b9:a2:78:72:53:9f:a5:77:b7:20:d0:5a:c6:
80:bb:ac:a5:b4:fd:60:50:00:20:71:9c:9b:82:d4:fe:f1:ef:
cf:e5:26:85:08:77:ef:2c:5e:e9:c7:48:41:32:6b:19:ea:6a:
03:f1:9c:93:11:06:69:1f:7f:76:95:64:44:c3:aa:47:29:9f:
b7:b2:f0:75:87:87:90:4d:00:78:46:e3:cf:13:93:90:70:fe:
76:fd:ab:86:e3:33:6b:13:88:0a:32:02:69:04:6c:79:d1:a5:
d1:9f:00:72:1b:8c:73:2d:48:a1:86:ef:9f:97:27:15:2c:01:
e1:1e:42:64:ac:27:d3:39:6c:72:98:e6:bc:a9:eb:c8:ba:5b:
37:f5:75:62:4d:8e:dd:14:c7:15:81:b8:b0:97:60:e8:ca:9e:
7d:d0:f4:78:4e:69:b6:50:72:74:f1:a4:d2:12:8a:e4:09:3b:
14:9b:cb:ab:b8:eb:8d:2d:85:4b:9a:e9:82:ce:63:6f:c1:03:
46:06:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:09:59 2024 by rpki-client on console-fra.rpki-client.org