Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer (raw, json)
Hash identifier: 7ukQpUAf/pMDq+CVD2mxvJaBhO+0e9qlG03WoaSFD4A=
Subject key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50110919365FE8D9673935B8AF63251
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198028
IP: 193.194.105.0/24
IP: 194.12.48.0/21
IP: 2a00:7620::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:10:91:93:65:fe:8d:96:73:93:5b:8a:f6:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08819c27a5be3d2db222b05637447ed6e8324873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:e5:37:e1:2e:bb:55:1e:41:a8:2f:bd:39:
a1:39:39:8c:36:ee:1f:10:b1:5a:d0:32:ba:18:ca:
c6:34:c3:f5:3a:8c:ca:0e:a6:ea:5d:02:26:fc:f1:
9f:aa:57:7b:ad:06:83:02:45:4f:6e:84:ac:36:e1:
7e:17:36:29:b1:dc:38:dd:44:a4:87:36:ea:bb:47:
b3:56:6d:bf:a2:a2:cd:cf:05:fa:c2:5d:25:38:c6:
41:99:e6:ec:5e:65:66:cb:d0:83:e4:88:78:42:4e:
5a:8d:1a:a3:37:7d:c0:7e:0c:33:db:3b:7c:3e:a4:
49:fc:fa:33:5c:72:5d:b6:12:ba:3f:46:35:33:70:
0c:e4:0c:4b:90:b1:a7:c0:91:0b:54:5c:6b:4a:e8:
cc:90:5a:57:1b:2d:87:04:0e:f5:1a:08:fc:c8:83:
c3:02:22:43:76:0e:5b:82:91:10:bb:7a:f0:8d:0b:
5e:f6:cf:95:34:f0:87:70:b5:a2:10:1b:72:49:86:
2b:ad:ad:31:a1:e0:79:7c:ed:e3:8e:97:62:ca:a3:
e3:28:8b:d4:d7:97:50:57:f2:8b:99:e2:18:c4:8b:
2f:24:12:07:c0:b5:98:1d:31:a8:35:cb:9d:12:0f:
50:dd:a0:0e:5a:17:75:1c:1c:95:c3:41:45:8b:79:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.105.0/24
194.12.48.0/21
IPv6:
2a00:7620::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198028
Signature Algorithm: sha256WithRSAEncryption
99:26:b7:14:bd:bc:d5:4e:6c:cb:ae:50:e7:66:03:03:8b:2b:
df:1e:c3:5a:73:c8:b3:99:30:e4:77:ba:38:d4:b7:bc:b4:7b:
40:cb:0a:bb:7a:a7:9f:cd:5e:1c:25:d9:14:4d:b3:f3:d8:bd:
f6:75:2b:bc:33:2a:43:bf:91:bd:61:5d:57:6c:97:e8:3a:0a:
3f:df:13:87:72:6d:bf:ef:2a:e6:fe:8b:ee:ff:43:09:eb:32:
0b:f5:5b:cd:7e:06:1a:ba:64:d4:2c:62:d8:e7:a1:77:7d:bd:
eb:df:b5:6e:64:0b:17:08:f7:80:5f:c7:0a:3d:19:7c:4a:9d:
76:12:8a:5c:a8:3d:bd:51:d5:57:85:8f:10:96:dc:71:b4:0b:
84:68:0d:ee:94:11:a6:a7:ca:19:d7:fc:bf:e1:74:6e:dc:82:
36:3f:0d:2d:03:eb:15:c9:00:f3:ee:fc:f2:91:9a:88:9f:c0:
e9:b7:34:b3:3d:de:c0:8f:bd:ca:e1:6b:ca:f6:bc:7e:41:9d:
39:75:8e:d5:b1:ff:72:b5:37:80:7b:b3:24:be:9a:a8:e2:fd:
e5:7f:25:8c:c0:c9:ac:14:83:92:68:4f:7d:48:43:ae:48:7e:
8b:19:55:bd:c5:b2:ec:87:ed:ea:f5:28:0d:8d:ae:f1:74:7c:
6d:64:77:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:44:41 2024 by rpki-client on console-ams.rpki-client.org