Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
File: Fi14JJtyG00s6M9t_PvEQiITrJ0.cer (raw, json)
Hash identifier: TeZDu4jU3WO8/c7zKuww3MCz0HpxXeprGS9AQs0431E=
Subject key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BAA8A8FAFE7B60733726D505C43396
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:31:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203944
IP: 185.118.216.0/22
IP: 2a06:95c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:a8:a8:fa:fe:7b:60:73:37:26:d5:05:c4:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:60:2c:50:0e:4b:c3:e2:97:be:d5:19:0c:
6a:94:09:ee:08:d7:6a:57:1b:8d:5e:ad:a2:79:a3:
77:c4:ee:22:0d:27:7c:77:91:0b:bd:63:e3:d9:e2:
4a:33:48:9c:be:85:8b:4e:41:e6:1b:ed:2e:12:c1:
c1:71:b8:5f:1f:aa:a1:3a:b4:e7:67:c1:3d:b5:66:
38:e3:38:a3:8f:ce:6a:06:85:95:70:2a:70:1c:df:
31:70:53:41:dd:d3:61:fe:d8:71:28:39:26:f1:8c:
16:ec:d2:3c:19:51:3c:4b:33:5a:26:20:c2:54:d3:
bf:a7:f5:52:6f:54:b4:b9:c7:44:3f:e7:13:c9:47:
60:05:ac:2a:90:3c:ba:a1:87:1a:f0:92:87:0b:14:
11:9e:1c:ec:ae:47:64:fa:b4:20:7f:12:1c:2c:43:
3e:e4:4e:fe:58:cf:b8:46:a5:87:9e:9b:32:92:d9:
a4:2c:15:87:7b:8c:a0:f8:f6:e8:37:82:d5:8a:20:
38:ad:ac:3d:49:09:6f:6c:8d:29:d2:db:a2:d6:52:
5d:40:a7:6f:b7:47:5e:aa:a2:e8:9f:45:dd:14:7d:
80:e6:58:0a:1f:6d:57:27:f1:2c:f3:02:1f:d1:05:
3f:4e:e7:22:5f:5e:6f:da:f6:94:2a:87:56:34:a3:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.216.0/22
IPv6:
2a06:95c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203944
Signature Algorithm: sha256WithRSAEncryption
68:c3:4b:69:11:c4:7c:59:8b:da:cc:42:21:c6:eb:58:de:24:
48:c6:d7:8f:b7:09:95:0b:02:ed:b6:24:1d:8d:c6:59:cd:df:
f9:98:2f:f7:5c:64:b4:1a:81:aa:02:a9:c5:61:62:54:9f:85:
3b:d9:d8:56:f4:24:47:50:f4:6a:b7:6d:11:50:4b:33:50:d2:
a7:f3:de:ae:11:fe:6a:7f:3b:09:57:07:fc:d8:f6:40:59:28:
d5:3f:84:81:3e:e2:5a:4b:21:e4:33:49:37:44:96:5c:0b:b8:
08:11:d0:7c:7a:fa:37:ba:0f:51:63:34:00:10:95:e4:3a:6b:
26:99:2f:e9:49:bf:ee:b8:78:12:1f:5c:01:7a:3d:1e:43:49:
8a:82:29:d7:9a:4b:f7:c4:bb:af:48:d8:fe:d2:15:d7:24:ef:
63:b8:a6:d6:87:56:d4:f3:8b:57:81:73:c2:65:e2:60:5d:27:
ed:37:fd:f9:c8:0f:fe:e3:87:74:ee:44:d0:23:b5:12:56:f8:
94:19:cd:6f:48:14:13:11:36:16:e1:11:da:8e:26:89:23:f7:
5a:c7:ec:eb:19:27:fc:64:85:db:c1:54:cc:24:63:64:be:85:
da:70:f4:cb:4e:0f:fb:80:4a:85:30:68:d0:a4:d5:19:1d:db:
58:1e:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:25 2024 by rpki-client on console-ams.rpki-client.org