Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CgyKlNO8BMI87qeKEM8hjxvw7Hk.cer
File: CgyKlNO8BMI87qeKEM8hjxvw7Hk.cer (raw, json)
Hash identifier: sRfiFdilWB3gaqLeBI3gDNsFI6EEiAIfRUPhcJMfp8c=
Subject key identifier: 0A:0C:8A:94:D3:BC:04:C2:3C:EE:A7:8A:10:CF:21:8F:1B:F0:EC:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E22D6F490E0D6B7960756E4A2CF8F992F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/0A0C8A94D3BC04C23CEEA78A10CF218F1BF0EC79.mft
caRepository: rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/
Notify URL: https://x-8011.p.u9sv.com/notification.xml
Certificate not before: Sat 09 Mar 2024 10:51:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199918
IP: 196.1.104.0/24
IP: 2001:67c:34::/48
IP: 2a04:5a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:22:d6:f4:90:e0:d6:b7:96:07:56:e4:a2:cf:8f:99:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 10:51:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a0c8a94d3bc04c23ceea78a10cf218f1bf0ec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:26:ab:5c:3e:ba:c3:4c:0e:08:e2:d4:6e:
e1:7e:c6:a2:59:da:8d:38:17:65:bf:cd:5e:1f:70:
ec:e3:0c:e8:45:2f:bc:5f:26:b1:39:88:30:ff:90:
32:17:66:09:83:09:a8:2a:28:7b:2d:bb:7b:50:d4:
f5:c2:2c:35:0c:b5:fb:d5:2d:84:04:4f:00:65:0a:
17:44:bf:4c:7c:72:da:a4:9f:9d:24:b1:99:4a:87:
4b:1c:0a:6a:34:bf:d6:a0:cb:1c:96:b5:2e:61:a4:
5c:fc:56:73:a7:87:da:2d:17:4c:09:d7:9d:5e:29:
e6:0a:72:f1:6a:d3:10:75:a6:35:f4:a3:40:f1:f7:
11:22:a6:88:49:fc:d7:24:6f:05:29:34:f2:5e:c5:
c1:51:0a:93:25:07:d7:b0:0c:38:fa:e3:bd:3f:c9:
be:66:8f:9c:f0:ce:32:35:bb:58:05:3b:5c:18:ed:
09:cc:bd:03:80:a0:98:3b:ea:e1:e8:af:10:b6:b5:
17:c5:41:20:51:92:9d:46:ac:ec:f3:8b:a9:d4:7e:
4b:45:c7:cc:09:02:17:f5:a3:1c:bd:04:52:59:97:
30:3e:be:87:46:04:6a:d0:b9:e7:92:cd:19:de:17:
31:2f:de:a3:b2:f6:7f:ed:07:c2:b8:ab:c8:cb:25:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:8A:94:D3:BC:04:C2:3C:EE:A7:8A:10:CF:21:8F:1B:F0:EC:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/
RPKI Manifest - URI:rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/0A0C8A94D3BC04C23CEEA78A10CF218F1BF0EC79.mft
RPKI Notify - URI:https://x-8011.p.u9sv.com/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
196.1.104.0/24
IPv6:
2001:67c:34::/48
2a04:5a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199918
Signature Algorithm: sha256WithRSAEncryption
02:22:9f:65:74:dd:eb:b2:76:95:17:c6:d4:30:e7:3c:8a:b6:
38:8b:87:f4:ad:70:d8:c7:2b:11:ff:61:0e:3d:93:2e:b9:2d:
1b:d5:6c:f9:aa:a8:74:a3:76:c6:f9:65:a2:c5:e6:00:c1:1c:
02:22:ec:7d:32:81:87:bc:eb:62:b2:ff:90:74:ee:3f:88:2e:
0c:5c:65:f8:bf:d9:61:db:f0:d4:ac:fc:be:96:6f:6f:83:45:
10:41:34:6d:93:47:8d:55:37:93:25:ba:26:8c:19:9b:34:6a:
0f:b5:cf:6b:b9:13:98:09:70:8a:7c:10:7b:58:6e:85:7d:12:
57:2d:29:d2:65:07:61:84:6c:57:a9:d8:54:9e:0f:65:81:f7:
67:ab:82:8f:e4:d3:6d:55:82:a0:f0:12:aa:53:98:01:40:3c:
1a:2d:37:ba:36:bd:24:8c:39:6c:1a:c6:ff:08:0b:90:4e:0f:
4e:1d:19:1a:b0:ec:f7:ee:d3:26:c1:0b:70:33:df:c2:b3:78:
e5:a5:0f:a5:cf:63:2f:39:04:6c:b3:06:b8:a5:fc:9d:16:14:
75:07:52:41:28:c8:c0:37:e9:76:f5:19:f3:dc:7d:c4:b6:42:
40:1b:90:a9:3f:f5:2f:33:6d:f7:57:de:15:9b:55:b3:43:a1:
d3:c8:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:45:41 2024 by rpki-client on console-fra.rpki-client.org