Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer (raw, json)
Hash identifier: z7jRaheHH7vVrPM1kk8AkinnuQPLYl1IDLaqewN4Idw=
Subject key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649B2D75658D8D25B170E02B365E3A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204274
IP: 85.184.128.0/18
IP: 85.191.0.0/17
IP: 87.104.64.0/18
IP: 185.107.200.0/22
IP: 2a01:7dc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:b2:d7:56:58:d8:d2:5b:17:0e:02:b3:65:e3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:80:43:de:43:a4:e5:27:c7:6d:7d:83:cd:
7a:d1:2b:55:55:ae:ce:2a:44:3a:bf:a1:6f:87:b7:
27:48:64:ec:65:2e:18:74:58:b3:10:6b:a1:f2:69:
24:54:eb:05:94:0c:ed:3c:4a:37:ef:72:da:56:c2:
af:b8:7a:17:75:67:f6:d5:6d:f4:65:8f:fa:1d:0f:
c7:94:cc:fe:42:22:38:f5:ca:12:21:02:ad:63:77:
4b:cd:ba:b7:19:a4:e3:99:2c:0c:c4:c8:e4:d2:64:
bb:db:13:24:f7:24:96:84:72:66:24:46:09:86:bc:
b0:78:b4:6a:7c:1d:88:fa:0c:2d:05:3e:58:f0:b4:
00:fc:df:6c:4d:95:b2:43:3e:9d:ce:f1:d1:8a:49:
76:a9:da:75:46:ff:bc:36:56:dd:0c:65:cf:b6:cb:
8b:8d:3e:02:72:b0:06:9c:31:6b:92:86:3f:a1:44:
86:fd:89:b1:76:fb:87:c3:6d:b1:56:f9:dc:2c:4c:
ee:4f:a2:28:26:64:ea:39:60:e9:78:e1:bd:e7:5d:
c9:35:5a:5f:f8:c2:f1:11:3c:3e:20:76:8a:a3:4d:
53:a5:a5:ea:5e:9d:98:ed:8a:04:72:55:54:04:4b:
47:ea:c9:c4:ad:b6:d0:2e:0c:d7:e9:f0:d4:da:8f:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.184.128.0/18
85.191.0.0/17
87.104.64.0/18
185.107.200.0/22
IPv6:
2a01:7dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204274
Signature Algorithm: sha256WithRSAEncryption
83:72:2f:57:13:a9:d5:92:69:7f:a8:fc:e7:db:ed:5d:fb:50:
54:88:1d:1b:fd:0f:f0:8a:3a:d4:b8:22:a9:8e:b5:0b:84:fb:
fd:8b:c3:d7:77:e0:c7:6d:6e:fd:56:c2:54:24:4f:81:e5:02:
74:ba:ea:50:b9:66:e5:79:74:23:85:0c:a4:88:04:08:d3:3f:
53:7e:44:d1:29:df:cd:43:9b:da:fe:a4:75:fc:40:82:f0:12:
0d:a9:a5:ab:93:d8:f1:a2:ce:d1:43:6e:b9:77:33:3f:96:17:
12:ae:98:38:64:05:9b:93:c6:52:99:05:08:f6:92:65:a5:aa:
30:0f:d5:76:ee:0f:4c:ae:c5:04:ff:bc:c6:97:85:88:49:88:
ea:2a:b2:d6:ba:90:57:33:d3:d0:dc:74:e4:37:c5:2d:e4:99:
66:a1:35:be:9c:26:dd:89:fe:6f:e0:42:b0:e5:e4:fb:57:fb:
25:b0:29:52:c1:1f:07:b6:01:b6:c5:8d:21:5d:ea:ae:50:00:
34:0c:32:7d:1f:c7:ef:08:28:97:97:b2:b3:a2:eb:19:f7:aa:
af:57:6b:6e:2f:bb:d1:99:c0:c7:eb:18:4e:c1:bc:d3:fa:c0:
31:42:5c:1d:75:f8:a4:f1:ea:20:59:b6:77:3c:c7:e4:99:39:
dd:98:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:51:56 2024 by rpki-client on console-ams.rpki-client.org