Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
File: FqwWDambNJSla1R8aKjiwJGGkbU.cer (raw, json)
Hash identifier: Gi9d7eC5s9jzR2uDS8AXacp2MfoANoGftpErqxB1xNU=
Subject key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7933090138618883659A4AF5C1A4622
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62223
IP: 185.42.192.0/22
IP: 2a04:9100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:30:90:13:86:18:88:36:59:a4:af:5c:1a:46:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:6f:ea:f1:df:36:36:e9:d4:1d:3a:57:71:
3b:24:56:48:96:6d:1f:ed:1e:30:28:d7:1b:53:98:
8f:04:a0:91:31:c0:42:cd:f8:40:f8:36:a0:18:0e:
f4:96:43:53:12:86:24:18:37:b3:57:71:25:7e:05:
bf:4b:cf:ee:01:ad:e1:29:41:f5:ec:15:ba:d5:01:
43:78:69:d0:ec:37:c2:06:d7:f8:28:54:81:8c:9e:
bd:0b:02:21:e9:f9:01:6c:a0:62:1f:10:1d:81:a5:
64:b8:25:ae:3d:1b:1d:4f:12:62:e2:1f:b9:ab:b5:
9f:e1:db:f7:e8:81:7f:36:8a:40:da:ae:3e:0b:73:
5d:25:ce:32:75:5c:46:92:74:f3:12:7d:28:49:e2:
70:e8:63:97:bc:4b:d4:f5:fe:17:20:10:24:21:25:
1d:40:c4:b5:67:b5:b2:2e:37:13:67:60:00:65:4f:
2a:c1:05:47:35:2f:fe:cb:b5:5b:fe:95:83:ec:02:
4c:6c:53:2b:3b:21:97:05:b4:5b:63:dd:21:16:a7:
fd:21:e9:79:0b:04:c1:74:8a:50:ea:0e:93:c1:35:
da:4a:6c:f9:ed:a7:78:21:48:bb:ca:ca:7e:95:b5:
c9:47:e7:ca:ef:34:04:8c:0c:2c:52:50:7c:76:99:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.192.0/22
IPv6:
2a04:9100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62223
Signature Algorithm: sha256WithRSAEncryption
73:ff:56:b1:ea:92:99:a7:98:b3:92:dc:61:5d:ee:7c:54:99:
d3:fb:25:65:17:0c:c5:4c:f2:e0:63:a6:f1:2d:9e:b1:3d:e0:
c3:60:2a:aa:f9:0a:a2:10:e5:8b:22:a1:2d:76:49:c9:6a:48:
8f:7f:3d:39:b1:af:1a:60:d2:a7:9b:b7:54:34:70:05:81:42:
17:f3:37:7a:6e:2f:80:06:d5:ed:3e:43:e4:28:1c:f7:bf:13:
cd:ee:9c:a8:ee:fb:5b:aa:8a:23:17:2b:73:48:62:f8:15:36:
79:e5:63:d1:b7:9f:22:09:97:9b:55:c9:fb:0a:c6:38:f4:a2:
1a:37:be:d4:b8:44:26:6d:21:4c:8a:ef:8c:1e:52:80:ad:51:
8d:79:02:a9:cd:fb:3c:fb:0d:96:f9:ca:fb:57:cd:7d:43:38:
c4:da:38:f7:40:38:a7:74:2b:66:36:90:d9:6d:97:81:47:01:
c6:3d:ae:7b:c7:75:58:af:e7:30:5a:11:34:c9:3d:5c:f5:45:
2b:ed:a0:9c:52:4a:7b:10:90:da:7f:0b:9c:c0:81:60:57:5d:
3e:64:a1:2c:06:49:42:6a:d0:9d:97:61:b7:e9:5b:dd:68:68:
93:3d:3d:d4:8a:d8:1f:0e:4f:42:41:9e:51:35:07:21:d2:11:
b6:97:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 13:53:55 2024 by rpki-client on console-ams.rpki-client.org