Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.cer (raw, json)
Hash identifier: ofUlWB2JttFgNXXWvb+PuJQxXJQHJoZereF3m9zuEig=
Subject key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79582CE61FD4DC04ED965DE7B29C32B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204490
IP: 185.154.20.0/22
IP: 185.186.140.0/22
IP: 185.247.140.0/22
IP: 2a0d:c580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:82:ce:61:fd:4d:c0:4e:d9:65:de:7b:29:c3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:84:94:c9:91:a7:1f:1a:7d:57:0c:0a:9e:
1f:df:5e:e1:c4:f8:e9:6d:00:10:33:d1:c2:e0:c9:
75:41:25:e0:4e:c2:f3:06:98:fa:f0:98:8d:51:59:
1d:f9:74:9e:bc:7f:33:24:c9:18:88:77:e3:8a:5f:
38:89:7b:a9:8a:2b:46:46:9d:d2:6f:75:7e:bc:43:
20:f5:cc:16:30:4c:dd:58:17:56:c4:3c:2c:ec:57:
b2:dc:63:3c:81:9c:3d:3a:0a:58:4d:c6:f2:ff:05:
2f:05:bb:ff:53:3b:26:b6:f7:1f:5b:2b:0e:c4:a7:
44:c7:41:e8:35:83:a7:70:a2:11:da:42:88:0a:ec:
ed:45:b0:46:7f:8b:c1:5f:78:ff:8f:41:60:ef:7d:
ed:5d:27:7d:dc:02:cd:5c:ea:09:23:fd:93:54:b1:
e5:ff:58:ef:e9:5a:49:1b:6b:f4:65:2a:d0:66:c9:
e4:f2:de:97:11:7e:73:22:2a:37:0c:9e:d2:70:a3:
5b:6d:69:0d:a6:c5:6d:12:2f:ca:73:a5:a9:a8:34:
0e:88:07:81:11:1e:77:42:50:8a:4b:b0:5e:6a:51:
36:e8:a7:e9:0b:1d:1f:32:11:58:27:34:07:f4:22:
be:00:fc:6a:59:6d:74:0b:9e:e5:65:78:14:a8:02:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.20.0/22
185.186.140.0/22
185.247.140.0/22
IPv6:
2a0d:c580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204490
Signature Algorithm: sha256WithRSAEncryption
57:a7:f9:0d:7e:86:6e:7b:7f:37:cf:87:9a:83:61:a5:d1:0e:
15:92:03:74:e3:d4:49:b6:c0:92:30:0b:56:20:ef:a5:ce:00:
42:f7:e5:55:a6:ec:51:24:4d:68:8b:27:0f:57:b1:2c:7c:7d:
a2:ce:dd:14:55:02:47:5e:80:90:d7:3c:2d:d1:c4:b8:97:8f:
29:e8:47:e7:c3:1f:14:77:49:3a:da:6c:b4:b0:7f:bf:9b:ed:
77:40:92:6a:1b:47:d2:01:24:e6:cf:a5:c0:d1:a7:77:d3:79:
da:a6:b0:24:06:4a:ab:e0:48:0f:4e:60:ae:0d:a4:11:29:93:
78:c6:74:33:c9:72:1f:0b:e5:93:22:b4:9e:7b:c1:c3:e9:5d:
a2:40:da:03:3c:54:f5:4d:dd:57:ae:8f:7b:fd:4d:a4:71:8f:
ca:af:50:07:8b:ed:08:72:a9:eb:ef:0e:3b:eb:3e:6f:ea:75:
1b:34:d3:fc:b9:6d:45:31:bd:39:1c:a5:3f:25:59:9e:21:d8:
ad:b3:64:65:da:87:ad:7b:9c:73:42:a7:20:46:e6:21:a8:e5:
d9:2a:78:07:11:c1:4a:e6:82:62:de:e2:5a:38:e2:05:d5:d8:
c4:66:7e:1a:6b:11:42:e9:38:1b:36:ef:39:4a:71:a4:87:4f:
5f:8a:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:21:03 2024 by rpki-client on console-fra.rpki-client.org