Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.cer (raw, json)
Hash identifier: qvHaIygjafcLGeAJwg3W5lm9KOEMso/CPJI5+grQMRI=
Subject key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B9C7AB25FED66E07F87812F307D2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62094
AS: 206096
IP: 5.154.244.0/22
IP: 185.48.80.0/22
IP: 2a01:9560::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:9c:7a:b2:5f:ed:66:e0:7f:87:81:2f:30:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:6b:d5:b8:13:29:95:fb:0f:4f:09:dc:dd:
97:b7:bc:92:f9:1c:ad:20:54:33:3b:58:27:3f:77:
b8:a7:d6:65:ac:4a:48:53:b8:5c:3f:88:5f:82:18:
d8:11:bb:01:16:13:d7:1e:45:f4:0b:1b:56:c8:fb:
c9:47:d7:00:af:ab:ae:58:a6:8c:fc:4f:9d:f8:18:
14:aa:2d:7c:97:93:0d:51:4e:cd:38:c8:90:0e:67:
b4:73:b9:2d:52:0a:13:11:ab:dd:0a:4a:a1:4b:e8:
c8:df:de:d6:83:42:87:cc:cd:fe:a0:9b:b3:d1:69:
fc:18:db:23:94:14:9d:64:f7:dc:d7:73:ec:49:e2:
d7:fb:c2:07:da:8e:86:db:58:f3:ba:2f:33:ba:51:
0d:b4:af:58:91:46:b7:f8:32:aa:ac:ef:60:6c:93:
bf:63:a0:8d:55:f1:61:5d:83:cd:60:14:eb:23:97:
17:c6:9b:e1:1f:3d:ac:bc:29:e6:1e:82:29:2d:1c:
2d:39:b2:f0:4b:d2:3e:8b:b8:d9:16:44:05:98:98:
77:08:fb:d1:fa:eb:a7:b1:4d:cf:fc:6e:99:bc:a7:
a7:db:68:a0:b7:29:8c:ed:0e:d4:76:f9:45:dd:08:
43:be:bf:37:f7:83:3d:19:f3:0e:44:11:9c:a7:92:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.244.0/22
185.48.80.0/22
IPv6:
2a01:9560::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62094
206096
Signature Algorithm: sha256WithRSAEncryption
82:6c:bb:fe:02:33:95:c8:f0:36:3b:96:da:85:9f:57:c5:2e:
00:ab:8f:23:cf:a6:b4:a8:a2:22:28:74:bb:9b:2b:90:86:80:
ea:2d:1b:91:09:b8:91:c7:cb:6e:ea:d3:11:9a:c5:cd:73:b0:
0b:bf:c3:c0:96:4f:e2:24:68:7e:29:bb:80:8d:2c:b0:7c:5a:
f5:0d:3d:ae:1e:ba:f0:f9:fc:26:74:e4:b6:70:a1:05:f6:ab:
58:3a:58:20:c5:13:e7:d3:a7:9d:80:c2:83:b8:ed:ac:b7:24:
e7:f8:50:4a:4c:b7:be:8a:4a:67:4f:64:8c:0d:0e:bb:cf:ed:
70:ab:17:d8:37:17:41:3e:a3:96:97:7e:54:c5:9b:f7:bf:8c:
71:4f:f3:e4:c6:d3:c8:78:6a:da:0a:e1:3b:8f:60:b6:1c:5f:
d9:1a:2f:6c:7e:f5:b1:31:be:d5:2f:ee:6a:c9:be:8e:0e:b8:
d6:1b:ea:9e:f0:e6:b1:e0:e8:ff:60:62:b2:15:dc:41:d2:fc:
5d:8f:1c:97:a8:ca:cf:9f:9b:da:8c:28:de:e3:13:78:b0:0a:
d6:f8:46:55:2c:d6:ca:1f:93:7b:b6:74:5b:f5:77:87:04:42:
6b:98:c0:1c:40:a6:63:5e:8b:10:4c:58:a0:7a:9f:52:ab:f3:
58:b9:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:44:19 2024 by rpki-client on console-ams.rpki-client.org