Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
File: AyudLeU3ELMVjkLyKIkQnixA9Ds.cer (raw, json)
Hash identifier: oiSeQ+jeXpjJqqcev69nfyhHwvzw6Llk6vDsbzcIQh0=
Subject key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019082FF3ED50FCE6D5F068D21DA846B3B23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Jul 2024 13:04:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210022
IP: 185.158.20.0/22
IP: 2a0d:ad80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:ff:3e:d5:0f:ce:6d:5f:06:8d:21:da:84:6b:3b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 5 13:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:31:7f:8c:58:5e:a1:92:bd:8e:d3:be:d5:
66:02:14:fd:a8:91:83:0b:b5:14:a1:3e:83:ca:95:
67:f9:4f:6e:d7:1c:ea:5b:fd:29:ad:7e:49:7e:c6:
8d:a6:5e:b8:40:94:8d:a3:0f:97:e8:a0:90:cd:ab:
7a:37:4a:03:4e:3b:d1:5a:d4:06:2c:da:f2:bf:5c:
ed:09:ef:f9:f0:9f:1e:77:66:51:5f:f2:8e:67:49:
9a:6d:3d:5a:80:72:db:82:13:30:eb:b4:98:6e:47:
6a:0c:8f:06:31:db:72:a5:22:15:3a:fc:24:ae:80:
27:9c:69:c7:53:72:3e:93:54:52:98:22:50:ec:17:
a3:d8:ce:f5:a1:c0:e4:98:13:dc:69:19:4c:b6:52:
dc:4e:66:90:68:34:71:aa:9d:cc:2b:17:14:0e:9c:
a1:38:1a:e5:8c:d2:4d:6e:3d:c4:46:57:b7:c2:bb:
a9:a0:17:a8:0a:30:3c:68:fc:e3:de:cc:f1:9c:a3:
c5:b7:51:8a:0b:28:d9:38:4e:ed:e6:d3:4c:b8:d9:
df:76:8e:73:9a:10:9c:7a:e5:35:09:2a:1b:74:97:
4f:94:09:10:8c:97:9d:3d:e1:f4:67:d2:02:24:a9:
fc:27:00:63:17:a2:cf:31:30:5d:ae:bb:f7:ac:13:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.20.0/22
IPv6:
2a0d:ad80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210022
Signature Algorithm: sha256WithRSAEncryption
0b:8d:e1:ef:60:2a:e6:3d:da:a7:d1:0b:09:ef:1a:df:32:64:
77:f2:c5:32:48:f5:84:51:8f:ad:6b:6a:95:b3:63:2d:30:06:
7d:fc:b5:35:bf:ba:37:b0:51:76:bf:46:c3:14:15:db:23:79:
da:98:18:56:33:53:49:bf:55:4e:39:59:1e:66:76:89:9b:6c:
6e:9e:6f:ce:bb:aa:a4:d1:c8:c0:5d:d6:b7:a9:2c:49:3f:d3:
01:0d:ed:95:c6:4e:ae:17:2b:54:ca:f5:9a:5b:b4:3d:aa:9e:
e5:f1:9b:1e:f6:84:e3:c5:a1:9d:72:93:c8:13:58:eb:33:fb:
ff:0d:04:7f:02:5e:e6:de:b2:87:b3:3d:9a:3d:8d:39:2e:1b:
ba:fa:d6:4c:1f:04:b9:3f:7a:1f:e9:81:0f:50:ba:8d:19:96:
d5:04:01:99:52:e6:4f:d0:32:9b:69:f3:64:b6:d9:eb:1e:0d:
55:d2:69:bb:58:7f:5f:12:56:c1:ca:8b:08:2c:36:71:99:88:
ce:2b:8d:f8:37:13:dc:97:c9:ed:2a:95:d3:80:fc:e5:42:7a:
3e:ac:38:da:6d:f9:93:70:b5:ad:a2:1a:01:35:03:70:f6:f4:
14:27:00:8f:da:eb:ca:c2:91:51:77:bf:81:f7:58:70:6c:8c:
ab:05:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:59:01 2024 by rpki-client on console-fra.rpki-client.org