Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer (raw, json)
Hash identifier: OFF23386508Lk2CynbbAh9Fv71+HTl//KgQrqpW+ElE=
Subject key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCD3DCFD5CC34C628681A0CEC9DD32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198399
IP: 37.34.72.0/21
IP: 185.95.224.0/22
IP: 195.93.168.0/23
IP: 2a00:c5e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d3:dc:fd:5c:c3:4c:62:86:81:a0:ce:c9:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:8a:e5:9b:1b:ab:78:cb:46:1b:50:04:98:
45:3e:d7:0e:d9:e8:08:f8:9b:51:dc:2b:ff:95:fa:
66:d5:2b:fd:f7:90:2c:fe:11:ea:38:25:b0:7f:df:
b4:66:57:25:29:c5:b0:ba:40:58:f8:34:69:80:74:
3b:0b:3c:d8:cd:11:d8:3e:70:22:c7:af:13:b8:a3:
5d:cf:f7:30:c0:42:0f:30:6a:5b:88:a7:fb:96:e6:
84:ee:f3:fe:bc:1a:e1:7e:34:8c:7f:23:80:9d:2c:
df:66:56:3b:b7:93:46:58:60:79:96:17:13:e2:9d:
63:6f:bc:00:17:79:42:16:a8:62:3c:ef:cf:c9:4c:
db:fc:b9:2c:eb:35:df:61:9a:d2:50:42:e7:27:f5:
15:02:e1:f4:a1:11:ab:fb:e3:d3:9e:75:35:de:34:
34:9a:0b:50:10:59:c5:f9:1d:46:b4:40:c0:6e:7c:
7d:62:e0:b5:95:90:fc:3b:ed:3b:9d:e8:e6:ac:f3:
a7:97:5e:0d:2c:97:09:f1:fe:2c:00:1f:a7:df:c3:
35:78:70:b7:13:d2:20:f8:f2:f7:41:61:66:6c:23:
6e:fe:1c:6e:4c:e1:24:85:2e:01:aa:ce:fc:ba:63:
af:56:f7:44:6f:09:77:d4:d9:ff:aa:71:c1:38:27:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.72.0/21
185.95.224.0/22
195.93.168.0/23
IPv6:
2a00:c5e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198399
Signature Algorithm: sha256WithRSAEncryption
23:0a:48:cb:29:b5:33:6f:1a:6b:dc:a5:6c:38:a5:de:05:b2:
a4:2f:67:6d:23:b0:f2:9f:7a:fc:d7:75:09:97:68:64:39:61:
5c:23:ef:d6:19:6e:d3:c9:bc:1d:ab:ee:cf:c4:c4:89:e4:ca:
16:34:df:dc:6a:fd:6e:6d:39:23:f3:2a:d8:3c:4f:6a:5e:7a:
4c:f9:03:c5:15:98:9a:4c:55:a2:ba:1c:27:ed:3b:d9:67:0f:
4c:c3:57:5c:8b:0b:62:19:a1:f4:56:06:5c:aa:c1:e9:ae:80:
ca:13:84:bb:c6:d9:46:a6:39:15:6e:70:6a:9c:70:95:74:92:
9e:84:f1:fd:62:43:de:05:69:75:50:43:8e:d6:f4:33:2a:37:
2a:84:9b:44:18:f8:54:4f:b2:9e:2c:12:23:83:3a:e2:f2:72:
01:c1:2a:c1:10:c7:8c:00:54:0e:bb:3c:73:6c:62:99:02:ee:
33:93:4a:9a:a7:25:70:5e:b6:a0:52:98:8b:03:5a:35:52:68:
24:76:e7:64:c5:21:93:86:37:5a:ec:ad:c3:f1:7e:27:5c:c2:
1f:4e:f3:05:bb:72:1a:53:eb:a0:42:65:35:58:4e:7a:d6:70:
2e:0d:b3:71:e3:4e:7a:f7:2e:b3:94:e0:81:78:60:be:c3:28:
82:9a:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:20:19 2024 by rpki-client on console-fra.rpki-client.org