Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
File: FgWNKEMMTknmGlivT9em9lbt_Z4.cer (raw, json)
Hash identifier: PSpp9/QBke8mPJ2NnXfaJsIzkpS3RfQacs60IyqZfa0=
Subject key identifier: 16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE0DC737CA4923105F2E9EB4D06376
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211385
IP: 193.107.12.0/24
IP: 2a10:f240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:0d:c7:37:ca:49:23:10:5f:2e:9e:b4:d0:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:43:59:20:4d:a0:1e:c5:d3:7f:9e:82:25:
89:16:c6:92:76:03:a8:3e:a7:a9:46:1c:30:47:3a:
50:d7:d1:f2:e8:c3:80:ad:2a:a2:e4:dd:96:86:1c:
72:12:3f:47:91:39:54:84:d7:4f:7e:d7:e9:c1:4d:
a6:fb:32:59:c9:94:c8:32:eb:81:b2:ed:fd:29:dc:
9f:24:33:1d:a4:ec:ac:60:f5:df:52:4d:89:ac:86:
71:81:a5:d3:0f:46:15:23:68:57:ae:47:0c:6d:57:
1a:cb:27:43:eb:fe:ae:a8:c9:92:25:ea:e9:1f:96:
f4:f1:0d:37:7e:3c:8b:2a:4e:24:16:11:32:5a:38:
f3:bd:97:22:ac:23:b9:1f:97:88:8e:2e:17:17:b5:
5b:93:7d:f1:7b:16:bf:98:a4:4b:19:9c:14:ae:e6:
94:9b:38:d8:69:17:7e:b5:9d:3a:4e:79:b1:6a:f2:
eb:c1:cc:98:bc:81:7d:0e:b2:cb:47:a2:f5:92:ae:
56:f5:22:7c:ce:fc:ac:24:4a:26:75:2c:36:8d:fd:
bc:e0:68:30:77:07:fd:b8:69:d8:cf:a0:38:25:35:
14:c8:81:ba:f7:52:f8:81:21:5f:7c:92:eb:88:19:
ca:d5:6f:11:f2:ad:8f:cf:ae:11:55:1b:43:f0:9f:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.12.0/24
IPv6:
2a10:f240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211385
Signature Algorithm: sha256WithRSAEncryption
48:aa:6b:9f:17:2d:19:f4:0e:1e:55:cd:e2:0c:34:f6:9e:50:
d6:3e:09:2c:8c:1e:35:19:18:81:3f:f1:6f:ba:db:3a:52:05:
81:df:5d:da:26:98:74:62:e6:42:35:c5:32:78:50:01:69:67:
a9:6c:c2:4d:7a:8e:e6:55:ad:f1:b9:76:e7:04:d7:ea:a6:1a:
df:07:d1:42:e7:2d:bc:07:27:f5:5f:1b:95:66:00:be:65:87:
d0:1c:03:3f:ac:de:d0:9e:f1:01:11:fb:71:48:81:dc:6f:7f:
20:71:c9:17:24:8a:a3:d9:ad:5c:e9:8c:36:08:17:29:4f:9c:
71:f0:75:aa:34:34:69:3c:47:6d:2d:8e:a3:b7:b9:13:f9:ae:
cc:d9:41:db:78:fa:23:f8:ef:83:be:c3:52:19:4f:a3:e0:25:
f0:0e:59:1c:7b:8e:8d:f7:fe:11:dc:1b:df:90:ed:a1:c4:98:
40:ef:7a:8b:c0:65:a1:64:7a:48:1b:ec:37:0e:d7:3d:dd:dc:
f4:86:af:40:c2:f7:53:43:7c:3f:5e:75:0e:96:9d:f3:a9:8d:
a9:09:88:6b:19:14:c4:6b:ca:f0:c7:72:ce:8e:60:41:b7:51:
af:94:3d:f4:f0:cf:d0:de:4f:d5:6d:37:d9:62:00:ef:7a:11:
83:35:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:45:51 2024 by rpki-client on console-fra.rpki-client.org