Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer (raw, json)
Hash identifier: iN3iXN3UTM0JOvdKhPMQHNfJnbw71NKtUbVFpN4whXU=
Subject key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6B30EFA58F3BF0CA8CD12B0B64901
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205189
IP: 185.226.216.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b3:0e:fa:58:f3:bf:0c:a8:cd:12:b0:b6:49:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1683805319d8485584dc39cf5381583fb6431d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:56:a2:a6:69:2b:b6:a8:ee:72:57:a8:2a:
d1:1b:83:a5:4d:2a:76:f4:84:37:c5:e3:ef:af:2f:
f3:04:7a:29:bc:b7:55:21:b3:dc:2e:88:a3:83:d2:
4a:c9:11:1f:e2:68:12:c0:55:0d:ea:9e:68:e9:cf:
e1:24:07:97:ad:fd:52:e5:a2:e0:18:90:8a:62:d9:
56:32:e8:d4:80:0b:51:c7:18:74:ac:c6:28:68:5f:
e5:06:33:3f:ae:3d:ed:e0:24:62:f9:e5:cc:a8:f1:
5f:68:7c:92:e1:0e:1e:6a:e1:83:95:d1:3a:34:b3:
88:df:38:ee:df:23:b2:c2:a1:a6:71:23:80:93:a0:
ea:4b:40:d3:a6:ba:2e:b6:65:bd:7c:99:70:ac:ec:
c9:32:d4:da:c4:8c:82:63:9a:b0:41:36:e2:ac:07:
20:33:28:cc:05:78:98:d1:c8:06:88:00:93:ce:9b:
e5:0b:cd:44:0e:6e:82:60:cb:40:da:62:df:ce:76:
77:1e:1f:17:d7:4b:d6:49:a5:43:14:50:ad:14:54:
16:b7:e2:8b:f4:6a:71:f8:0e:1c:13:79:5e:31:b7:
57:51:ec:a7:10:92:ec:b6:80:45:96:53:93:50:bc:
ef:8f:6d:14:77:d2:02:85:f3:f7:44:4d:c6:b6:52:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.216.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205189
Signature Algorithm: sha256WithRSAEncryption
1a:6b:6c:2d:62:96:23:2f:8e:83:23:cb:e2:64:87:27:c5:12:
11:87:c8:51:5e:ae:74:13:fc:11:e0:ed:a1:fc:30:d5:12:d6:
36:0a:49:9f:2e:a9:58:09:fb:39:c1:26:3b:bf:c5:fc:39:14:
ae:80:e5:c4:3d:e2:e8:ef:d7:43:cc:28:d1:77:85:50:e1:b3:
0a:89:6d:76:92:5b:9f:f6:08:4a:97:7b:8b:77:f1:05:eb:ec:
09:36:37:e3:cd:b8:3b:87:85:01:c2:ad:14:d5:9e:91:28:9a:
ab:22:0e:cd:98:b6:98:c7:dc:28:22:d9:1b:9c:7e:cb:37:0f:
a0:a5:3c:7d:ea:07:fc:eb:80:84:1f:c6:87:99:55:cb:88:59:
d9:a4:ee:e7:18:69:f6:18:14:cc:b7:1f:2c:4f:47:cc:b5:5d:
57:5e:75:62:52:72:c8:76:17:fe:6e:f6:c7:4a:7e:25:55:74:
bb:6e:fa:74:4b:f9:42:be:a2:36:da:64:cc:8a:5a:a9:86:7d:
4b:67:e5:77:68:4f:92:2d:8f:9f:a3:5a:2d:a6:99:71:85:ff:
f1:2b:17:6c:dd:79:e0:88:42:95:fb:48:98:4b:c4:17:a8:d2:
8d:7c:31:18:f6:dc:47:df:6f:46:52:8b:a5:17:2a:14:2d:62:
cc:2c:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:24:13 2024 by rpki-client on console-fra.rpki-client.org