Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
File: C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer (raw, json)
Hash identifier: HZ9pixs2JAI+go3LD5GQfoV0Iof9HU0UpX1auT4RXyw=
Subject key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8013E38445B149CBCD833F21385A99D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48781
IP: 91.107.0.0/18
IP: 95.128.240.0/21
IP: 185.33.244.0 -- 185.33.246.255
IP: 2a01:a9c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3e:38:44:5b:14:9c:bc:d8:33:f2:13:85:a9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:f7:2e:4d:bc:4c:63:55:17:7d:a4:00:c8:
38:07:d7:4e:68:cb:af:18:d3:f1:2a:1d:1e:e4:91:
cc:24:23:32:e9:6d:98:7f:32:d5:d2:cd:f4:e5:fb:
81:f5:67:3e:7a:dd:c5:a8:90:93:2e:66:13:a4:4b:
b5:8f:9a:90:65:a6:e0:10:b9:6f:8e:c1:48:34:8a:
9e:2f:a2:c4:bd:45:47:e8:4c:03:ce:d4:80:82:aa:
c8:73:c8:08:fb:60:63:17:09:6f:ed:2d:f7:b2:5c:
89:0a:87:33:68:80:20:f5:5d:22:ab:f9:a9:20:f7:
7e:e3:fe:21:c3:d1:87:fa:9f:6b:7a:05:c9:05:95:
3d:08:59:6a:a3:34:f3:cb:1b:18:90:a7:45:95:58:
44:06:74:25:f2:89:37:cf:78:ec:da:f3:ba:d4:96:
28:a3:09:6e:f2:a7:0d:51:11:5e:8d:ec:dd:65:22:
c3:45:cd:71:da:46:07:f2:62:ca:96:fd:92:17:99:
67:9c:3b:fd:af:f3:48:70:0f:df:47:d5:8b:0b:c1:
a7:07:3d:83:58:e8:b1:00:84:ec:80:2a:88:2f:27:
5e:2b:5a:2c:55:3f:1f:85:8e:b1:36:c4:2b:a0:24:
84:a3:0f:7f:6d:7c:92:25:3f:00:c4:53:aa:e4:8d:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.0.0/18
95.128.240.0/21
185.33.244.0-185.33.246.255
IPv6:
2a01:a9c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48781
Signature Algorithm: sha256WithRSAEncryption
40:1a:2b:e7:9f:d9:a0:8e:20:c8:54:5f:7c:4f:d9:f8:e9:d4:
10:aa:79:63:a9:3a:97:35:b2:3b:96:5e:cd:a3:44:66:ae:c7:
3e:d8:2e:92:61:d0:0e:ed:0c:bb:f6:18:75:8f:48:60:57:31:
0f:33:78:bb:42:eb:d2:bf:b2:9d:d6:1e:6a:8f:3f:52:a5:43:
32:6f:e0:d6:07:70:8e:92:78:4a:68:bc:cd:7a:af:9d:93:aa:
ce:9f:3f:e3:b4:86:15:13:2c:26:55:c5:51:59:29:5e:f5:54:
f5:4b:0d:9a:b7:c0:9f:46:cc:b1:21:0e:6f:d1:e7:29:f1:6a:
5b:2e:f3:00:93:e8:cd:dc:cb:7b:3f:02:b1:67:ea:2b:26:8d:
2f:3b:59:a3:0e:ec:32:c8:a5:55:ad:bf:46:be:e1:dc:66:51:
b1:4c:e3:51:69:56:98:44:6d:f0:d7:83:90:5e:54:2a:27:85:
cd:3b:19:62:fe:e7:f4:b8:7f:89:64:59:e5:bd:1a:c2:2b:98:
3b:03:b8:6e:76:8d:ff:3e:05:5f:41:2d:a9:07:0d:25:92:fd:
ed:75:0d:30:47:f3:84:c6:d5:6d:1e:af:1c:eb:38:a3:54:f9:
68:80:95:a3:93:94:96:df:d1:3b:f2:ec:fc:09:f6:d1:a6:e0:
64:48:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 14:17:22 2024 by rpki-client on console-ams.rpki-client.org