Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer (raw, json)
Hash identifier: LoSgeGpMwI235lYW0cG0xBBNLeymg3YG5xt6RqhmhLI=
Subject key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB49AAB8BED71EB84D283517F3DB93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202021
AS: 203264
IP: 185.56.64.0/22
IP: 2a02:51e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:49:aa:b8:be:d7:1e:b8:4d:28:35:17:f3:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:12:2c:cf:6d:b0:32:58:1b:3a:ad:0b:44:
a0:6b:e6:63:fb:1b:3e:6b:9e:f6:34:ef:c2:ae:43:
bb:4d:a9:af:60:a2:94:49:42:9a:6d:0b:71:78:c6:
7b:b9:82:3d:97:14:d0:1b:6d:42:6c:56:d6:3e:30:
96:a4:e9:50:c0:9e:7e:7c:a5:ca:9e:64:b9:a2:f0:
50:41:08:ff:37:d1:60:9e:8b:de:74:31:08:99:54:
67:d6:14:8d:89:92:ae:d8:c2:60:06:81:d5:b3:c8:
5f:3c:70:31:b1:85:52:f2:e5:33:4b:ed:ca:c4:6a:
9b:db:f4:09:83:fb:b8:50:35:e0:9b:64:c9:5a:95:
1f:04:65:f6:f9:f4:e5:8f:9c:46:00:2a:ba:80:a1:
89:93:5c:44:58:e7:fb:3d:c4:99:08:f6:97:f8:be:
5f:1e:e0:93:15:96:0a:42:aa:62:80:a4:b7:e2:7b:
f4:8f:36:17:3e:c6:1a:bb:32:d8:d9:48:0b:59:0a:
e9:b6:3a:70:3f:b3:2d:fd:f2:ea:d8:42:cf:a7:bc:
32:99:2b:7c:91:83:66:05:13:f2:d8:03:80:18:51:
a2:fe:93:b5:20:ba:d4:fb:d1:b7:e5:ee:60:36:7d:
f1:de:38:50:98:0f:01:07:99:a0:25:e9:4a:d3:7b:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.64.0/22
IPv6:
2a02:51e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202021
203264
Signature Algorithm: sha256WithRSAEncryption
87:ac:95:58:b7:21:46:87:fa:f8:ab:ee:a0:2f:d2:95:0a:f7:
32:85:4b:5c:bc:91:54:0d:f0:ac:0c:4a:24:8e:d7:06:ee:e3:
0e:e4:eb:d8:52:84:46:61:a0:1e:78:37:19:6b:35:ba:8f:cb:
a0:be:05:86:65:61:20:2b:1a:5c:ee:92:b3:d6:33:f4:b5:35:
46:9f:f5:6f:17:bd:27:e2:24:64:69:94:76:6d:92:b3:22:8c:
74:5c:2c:ca:be:4f:52:9e:de:b7:36:c8:b2:cb:34:93:c9:aa:
b1:6b:99:7d:44:e9:0b:d3:7a:ed:01:c0:86:df:54:a1:b6:9f:
54:39:fb:5b:75:79:5a:9c:1f:45:18:aa:cd:f7:ce:e7:29:da:
f8:3a:55:33:47:c6:1d:c8:1d:e2:8c:06:35:be:ba:53:48:5a:
df:c1:38:f7:ee:22:8d:a6:d2:0b:80:0b:b5:72:9e:8d:cd:d3:
b2:39:18:26:be:34:78:b9:55:60:fc:f7:ce:4c:73:0b:58:9a:
fb:ef:53:24:b7:6a:34:d6:0d:60:8b:23:d2:9f:a1:3e:55:73:
46:99:06:b2:7f:91:52:15:96:79:e4:d2:82:e7:88:c5:91:02:
94:bb:c8:d9:93:e8:9b:ab:b6:4a:df:1d:0e:44:d1:65:86:23:
a4:ec:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:39:16 2024 by rpki-client on console-ams.rpki-client.org