Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
File: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer (raw, json)
Hash identifier: kothVD2kFDGCIm9m2JUjbQVsO2yEswspv00evaglclY=
Subject key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DE56A7196D0F664EF9D331C28D415C978
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 Feb 2024 12:36:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39213
IP: 193.238.188.0 -- 193.238.190.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:6a:71:96:d0:f6:64:ef:9d:33:1c:28:d4:15:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 12:36:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:46:21:1d:47:b7:bc:f2:bf:ed:29:dc:b4:
2a:5a:03:37:ff:a5:c8:01:f0:7d:8e:1d:78:9e:1d:
2a:5b:6c:c4:44:99:c2:13:10:1a:07:de:6e:f6:91:
a1:55:98:95:17:92:72:63:f7:c7:d4:32:4d:37:ab:
ec:24:71:2e:32:a8:39:20:82:b6:ba:34:1e:c7:1e:
b4:f0:d2:28:98:25:22:26:e4:06:24:c8:6d:6b:a5:
1d:36:ae:e2:f8:85:ff:88:bd:a3:5f:da:f1:e0:46:
e1:cd:44:c8:50:05:7a:8f:21:2d:65:91:85:91:f7:
c3:28:e5:d5:ea:e1:6e:bb:99:23:d6:02:ea:44:da:
93:55:69:60:6f:2e:05:89:ab:70:aa:ea:ad:9b:d7:
85:ad:01:a4:2b:86:e7:20:bd:3e:72:67:7b:93:fa:
d1:b1:42:fb:b8:05:e6:87:2b:de:00:b8:e6:02:54:
f0:a9:b9:35:e5:00:b2:42:3a:41:08:e6:15:24:2c:
7f:cd:92:92:74:28:88:75:66:b3:89:c5:71:63:c0:
60:7e:d0:31:27:d5:85:f5:6c:70:d9:1c:62:52:27:
bb:38:dd:58:7d:7d:45:39:c9:e1:a3:c7:e1:bf:dd:
16:7b:09:66:4b:f1:6f:95:e5:9d:a4:a2:ed:df:ea:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.188.0-193.238.190.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39213
Signature Algorithm: sha256WithRSAEncryption
24:56:37:83:a3:0a:c5:c1:4a:84:1a:4d:31:52:af:b7:67:78:
17:3c:e9:d4:6e:8a:3d:bc:c7:dd:bb:f1:ec:89:e2:c2:54:48:
d8:f7:6d:71:23:2c:64:9f:e6:11:12:a5:c0:1f:8f:df:7b:09:
77:d3:b0:d3:09:94:4f:7c:0a:53:ac:c4:3e:b3:0c:dd:ec:5d:
63:83:34:70:97:ec:f8:c0:dc:dd:2f:1b:92:b1:0f:32:30:5f:
b8:2a:9a:98:67:4a:4d:29:2e:39:9a:2f:dc:fe:d2:65:af:b3:
c4:70:f3:c6:ee:ba:52:ff:38:8c:f6:95:00:15:3f:48:64:b7:
55:75:99:c8:97:7b:08:7c:54:07:18:4a:fc:8c:51:36:8d:d0:
a0:06:e9:0d:56:0f:4c:58:39:6d:b0:87:ff:1f:d0:50:ed:a7:
67:a3:68:c4:cb:1d:cf:9d:70:5a:2f:45:93:1e:57:f1:0f:d4:
04:3d:7d:f5:0b:79:6f:1c:3e:09:78:07:b3:d9:4c:a8:9f:85:
d4:c3:84:fb:ff:58:e3:ba:77:5b:7b:28:43:25:4e:d7:2c:95:
20:62:b6:43:3b:21:a7:22:ec:92:85:0b:0b:11:58:7c:02:28:
ae:9e:7d:29:a4:19:84:af:57:bb:98:ca:69:80:bc:a9:db:8e:
47:49:70:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:29:58 2024 by rpki-client on console-ams.rpki-client.org