Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
File: AyUDQljydbfIfl9PcHBsDPWI78M.cer (raw, json)
Hash identifier: ntf3OFUTovFrLT9eYugBX8mhUQUZfB/Cy7r8LanFmic=
Subject key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0E99D9CE0B12ECA867BCE855C04371D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 12:32:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206706
AS: 215369
IP: 185.126.32.0/24
IP: 2a10:18c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:99:d9:ce:0b:12:ec:a8:67:bc:e8:55:c0:43:71:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 12:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:1d:cd:c1:ea:3a:c8:6c:31:a9:31:46:f8:
0b:5b:fb:80:0e:d9:ff:3d:27:dc:47:9a:c2:96:35:
6c:e2:f3:98:b1:1c:2c:ea:33:c3:7d:2d:eb:ed:de:
20:35:dc:37:2c:5e:45:08:e0:7d:d8:72:b5:2f:9d:
2e:12:72:46:54:1b:bc:98:f1:f2:49:ce:9b:77:fa:
e4:f6:36:a4:ca:b1:6d:02:f7:bb:de:49:17:29:5a:
cc:bd:ce:3f:c1:db:6e:83:a5:36:48:be:08:1f:76:
91:a8:41:05:19:99:24:06:29:f7:bb:92:d5:78:9b:
1e:f5:09:aa:c7:05:8c:5b:f5:9a:bc:42:04:5d:db:
7f:27:47:cc:f6:db:15:7b:55:e3:db:5c:ee:60:37:
62:6c:22:9b:6d:b8:62:cc:45:eb:94:8f:df:c9:0d:
ca:28:44:55:53:65:5d:de:ff:bf:3a:4b:19:57:c3:
d2:b1:d3:70:3e:1a:c4:86:1b:c5:0b:89:3a:6b:6c:
37:e7:b4:6e:f4:da:6c:aa:da:98:55:85:0a:83:91:
c7:00:7e:87:17:d6:07:ad:19:bb:e6:fd:ab:0f:76:
1d:2a:71:e6:4d:70:64:11:b9:9b:80:5a:a8:b3:c6:
48:99:96:fc:85:88:29:76:e7:5f:0a:1e:ca:07:32:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.32.0/24
IPv6:
2a10:18c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206706
215369
Signature Algorithm: sha256WithRSAEncryption
23:a3:0f:14:e9:34:0f:40:d2:ad:15:bc:79:ee:56:34:2f:6c:
2a:7b:40:0f:a5:0e:85:e8:68:29:51:1b:a5:a6:c8:11:16:6b:
12:cb:51:c0:4e:17:b5:c2:72:ab:21:b4:d9:ff:b4:fe:77:8b:
af:4d:19:4e:b4:01:0b:3c:49:0f:ff:5d:b0:93:0a:80:dc:19:
99:3f:b8:80:e1:26:3c:b9:05:37:4b:46:20:92:bb:e6:94:6c:
2f:c8:04:c3:35:fb:e3:6f:f4:10:ea:37:e2:12:1a:c2:6b:86:
e9:97:68:ab:98:33:23:0a:9b:05:e9:04:8f:32:ff:86:f6:cc:
6a:1d:82:d0:4c:c1:6e:20:a1:6f:e0:57:e8:d6:bd:ef:1b:df:
cf:52:34:7d:4b:c7:14:87:f8:f6:3e:10:5a:8f:a2:41:50:40:
bc:69:55:e1:7d:d3:25:0f:6a:68:78:08:12:80:97:db:40:31:
1d:b4:bf:bc:12:0a:64:92:7f:30:56:19:74:17:32:b1:00:c9:
fc:d1:94:26:9f:16:a6:d9:33:3a:9c:a4:c3:ca:dc:45:33:65:
ec:6e:36:49:92:c9:a7:5a:3c:ce:0d:c5:19:bf:38:09:43:54:
10:21:fb:d0:1c:1b:58:55:28:4d:61:76:cc:3b:86:6e:db:9c:
cb:d3:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:27:15 2024 by rpki-client on console-fra.rpki-client.org