Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.cer (raw, json)
Hash identifier: MqwVRXxPilbgrq2JveBTQLmbViBTQjOfdUqYP/cTEog=
Subject key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE5DFA87C5F6AD4D4892F095B2135A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31398
IP: 193.164.14.0/24
IP: 195.47.207.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:5d:fa:87:c5:f6:ad:4d:48:92:f0:95:b2:13:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:a0:85:d5:bb:38:6d:b6:71:06:f8:41:82:
3b:8d:57:45:a2:d9:6c:25:03:36:d9:ac:a3:42:0d:
6c:fd:b2:71:7a:d6:04:4c:76:1f:66:b2:45:37:0c:
9d:c8:bf:21:5f:7c:8b:c8:57:ed:ca:15:d8:6b:e1:
86:39:a6:5f:03:13:00:03:3e:a9:27:e0:d4:70:4d:
fa:97:a3:0e:5f:ca:a6:38:fc:35:af:dd:f7:e3:45:
f8:f7:ee:31:70:62:de:9d:0c:ad:e7:3a:44:cb:8c:
b7:02:9a:4a:4e:f0:19:a2:73:76:19:f6:0d:e4:b5:
af:97:d6:2b:08:a2:3d:a1:42:b4:66:47:9b:28:7e:
09:40:5d:30:88:eb:40:f9:34:21:98:30:a1:48:07:
4b:4d:6c:11:3e:d7:3a:38:a0:84:33:ad:9a:77:f6:
e2:e9:61:5f:d2:66:a6:20:2b:2a:18:4f:40:8a:ca:
18:f9:e6:3d:7a:9e:aa:13:b6:16:14:a9:af:df:0e:
50:59:c8:8c:db:3b:e3:e0:1a:c2:e2:50:f3:d4:4b:
45:d1:e6:f1:31:73:4b:72:06:80:04:2f:6f:fe:cf:
59:c3:eb:44:42:68:3e:4c:92:20:38:69:87:9c:f0:
5d:f0:87:61:78:d1:ca:05:8b:64:b0:ec:0f:fe:89:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.14.0/24
195.47.207.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31398
Signature Algorithm: sha256WithRSAEncryption
49:6b:97:4f:a4:ad:f2:61:e8:52:b1:f3:3c:17:f0:6e:dc:47:
59:1b:42:2d:b6:2a:90:41:8e:30:e8:84:f8:ce:5c:c8:7d:84:
f1:23:40:67:b7:22:91:a7:65:0a:1d:0a:62:51:17:08:0d:42:
8c:50:63:9a:8d:f7:f8:12:1b:71:0a:b2:ae:73:c2:ed:58:3f:
82:94:e5:de:91:72:02:82:19:31:09:39:a9:1a:84:a4:75:59:
2f:94:25:3a:16:f4:5e:d5:ab:13:9c:43:3a:7e:f7:c9:12:46:
7d:0a:e0:07:4b:2c:9b:8b:16:e7:8a:3b:d4:64:a0:f1:5b:b2:
39:ca:bb:6a:30:54:9b:6a:09:e4:33:75:78:2f:2e:03:13:5d:
b8:59:f8:11:23:eb:43:aa:1f:2a:8a:d9:09:0b:c7:9d:29:6f:
0d:9a:b1:bc:2e:8f:99:cd:ae:0b:49:86:b3:bb:bb:70:a4:b2:
01:e9:28:f6:d4:92:af:4c:22:b3:77:1c:29:f7:2b:46:66:bb:
d5:cd:e4:05:19:51:52:27:68:a9:e5:e2:fe:ae:4c:7c:a3:dc:
0a:73:94:f9:f1:ea:6c:37:99:72:c9:4d:f3:18:9b:7b:05:a8:
e1:c9:22:e3:0c:f2:90:26:cb:9c:2a:3d:c5:31:a8:93:06:19:
20:1b:30:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:18:14 2024 by rpki-client on console-fra.rpki-client.org