Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer (raw, json)
Hash identifier: oUneYH7ddGkUKG92fuo6ARmK2M0C+Y8SOLlyjJC9JE0=
Subject key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019343E813C12021895796C00E906C5C9AF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Nov 2024 10:11:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202021
IP: 185.56.64.0/22
IP: 2a02:51e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:e8:13:c1:20:21:89:57:96:c0:0e:90:6c:5c:9a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 19 10:11:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:12:2c:cf:6d:b0:32:58:1b:3a:ad:0b:44:
a0:6b:e6:63:fb:1b:3e:6b:9e:f6:34:ef:c2:ae:43:
bb:4d:a9:af:60:a2:94:49:42:9a:6d:0b:71:78:c6:
7b:b9:82:3d:97:14:d0:1b:6d:42:6c:56:d6:3e:30:
96:a4:e9:50:c0:9e:7e:7c:a5:ca:9e:64:b9:a2:f0:
50:41:08:ff:37:d1:60:9e:8b:de:74:31:08:99:54:
67:d6:14:8d:89:92:ae:d8:c2:60:06:81:d5:b3:c8:
5f:3c:70:31:b1:85:52:f2:e5:33:4b:ed:ca:c4:6a:
9b:db:f4:09:83:fb:b8:50:35:e0:9b:64:c9:5a:95:
1f:04:65:f6:f9:f4:e5:8f:9c:46:00:2a:ba:80:a1:
89:93:5c:44:58:e7:fb:3d:c4:99:08:f6:97:f8:be:
5f:1e:e0:93:15:96:0a:42:aa:62:80:a4:b7:e2:7b:
f4:8f:36:17:3e:c6:1a:bb:32:d8:d9:48:0b:59:0a:
e9:b6:3a:70:3f:b3:2d:fd:f2:ea:d8:42:cf:a7:bc:
32:99:2b:7c:91:83:66:05:13:f2:d8:03:80:18:51:
a2:fe:93:b5:20:ba:d4:fb:d1:b7:e5:ee:60:36:7d:
f1:de:38:50:98:0f:01:07:99:a0:25:e9:4a:d3:7b:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.64.0/22
IPv6:
2a02:51e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202021
Signature Algorithm: sha256WithRSAEncryption
96:f4:ee:ed:e0:3c:f4:d0:7e:e9:d5:ac:fc:85:3a:ff:80:1b:
f0:24:b3:51:38:63:53:59:06:f9:39:08:69:ce:71:4f:00:cb:
26:20:49:39:d8:33:59:5c:a3:49:5e:a4:43:80:5c:d7:2f:74:
a9:37:15:5c:a9:7a:98:57:f3:b7:7a:45:02:b0:3f:2b:66:2e:
4b:4a:d7:75:05:c2:e5:4f:fe:16:06:f8:2c:1b:38:d2:c4:87:
cd:fc:f3:ac:45:14:4c:d4:22:f4:d4:a5:b7:3d:8a:4f:fa:4f:
59:84:14:68:9c:41:a8:32:aa:7d:2d:12:cc:45:bf:52:1f:92:
01:28:a5:55:c5:4c:4c:7c:a0:fb:33:b4:fc:e0:df:da:aa:fd:
ba:f1:ca:cb:b8:b0:4b:69:a0:92:40:e7:b7:50:31:59:19:65:
c8:52:0d:b2:05:f3:e7:a9:32:d4:61:3e:5a:d3:bd:fb:52:65:
db:d4:59:2d:1c:23:9c:a1:1a:93:48:06:ac:a9:7a:a3:9e:e8:
af:22:7b:db:44:69:8e:78:ed:2e:d2:a4:74:0b:28:40:7c:ec:
6a:08:ad:9e:06:d4:fc:7a:b2:73:28:0f:0c:98:e3:20:9c:c4:
20:40:86:9d:4d:94:75:04:4e:ec:9c:5f:06:58:5b:9e:b9:06:
48:c2:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:46:12 2024 by rpki-client on console-ams.rpki-client.org