Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer (raw, json)
Hash identifier: vLWhQLzNd8BVQSsQEpBU49uIM7ORn5br5O4c4yJ3zoM=
Subject key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348961C6E2DEC0FB4C93607BE797E0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202635
IP: 86.110.32.0/19
IP: 185.158.176.0/22
IP: 185.193.60.0/22
IP: 185.244.100.0/22
IP: 2a13:ca40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:96:1c:6e:2d:ec:0f:b4:c9:36:07:be:79:7e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:10:46:0f:59:42:63:2f:28:01:91:b2:80:
35:ea:9f:16:29:cf:8e:9b:4a:3f:bb:dd:26:dc:a4:
76:5c:77:7b:4a:20:df:08:b1:2d:81:20:b0:d2:9f:
86:1e:10:94:be:16:27:58:c4:b4:76:75:53:c4:d1:
ff:57:02:48:91:df:01:3a:64:6f:30:ce:17:e8:34:
b0:33:a0:5b:b1:db:c2:3c:94:6c:b9:16:87:92:cf:
0d:df:8c:44:e7:dc:ef:ae:cc:86:71:b3:94:88:41:
d9:3a:6b:4b:1a:51:86:8f:94:00:df:1d:74:b8:bb:
53:0e:b1:39:9e:c4:45:07:49:79:26:23:10:cf:a0:
70:8c:1f:5f:8a:a8:f5:a2:38:e3:0e:7d:49:57:6e:
ad:e4:bd:52:0d:bc:ce:a8:f7:c7:dc:f0:39:11:0c:
24:29:90:a9:e2:be:c8:ca:58:70:80:a9:9c:23:f2:
67:b5:b1:3a:40:e9:98:e1:47:8a:cc:43:f9:b3:10:
e2:5d:7f:9c:cb:65:bd:f6:6a:33:85:7d:21:8f:27:
57:aa:30:12:a0:6e:96:8f:70:6c:3a:30:74:f8:e1:
92:44:db:25:b9:8e:c2:bd:c0:86:63:fa:14:b9:f7:
a9:6e:81:0d:c9:8a:4e:45:84:2f:cb:6a:06:bd:23:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.32.0/19
185.158.176.0/22
185.193.60.0/22
185.244.100.0/22
IPv6:
2a13:ca40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202635
Signature Algorithm: sha256WithRSAEncryption
26:cc:b0:b8:f0:43:b8:3d:95:83:a5:b8:58:bd:6f:e1:a0:89:
85:b6:d5:5d:5d:63:86:06:ac:05:35:b8:2d:8c:45:13:72:8c:
fa:57:de:a7:ae:2c:d9:b1:41:5b:6d:91:14:97:80:23:da:fe:
ba:4a:77:bc:17:4e:01:cf:9b:56:b5:2c:8d:f9:db:c6:a9:85:
02:84:45:70:d7:64:0b:cf:e0:00:9f:0f:5b:67:b0:0f:ae:b1:
26:51:24:cd:5d:51:25:4c:5a:a6:a2:dc:8e:6c:8f:c2:52:9e:
46:c6:0b:15:ba:f9:56:f0:bd:bf:30:43:68:36:2a:f6:71:31:
6a:89:9c:5e:00:c9:3c:b2:97:77:dc:86:b9:52:3e:ab:52:29:
4d:c6:e7:60:a9:f9:4b:3d:d8:2f:5e:e4:53:22:fe:24:6c:f1:
05:a4:d7:2b:43:86:d2:6c:4f:2c:11:cb:ec:e3:24:75:62:46:
e5:e4:fa:21:f1:5a:5e:05:ea:d6:87:28:e7:9b:cd:1c:56:0b:
2e:c5:86:32:b8:8e:f2:2a:31:74:a3:59:ee:7b:e9:63:d8:b9:
f0:4f:b4:15:c0:05:00:99:a9:8f:a5:a1:ca:c9:77:98:50:8a:
b0:96:bd:11:c4:c0:0a:62:db:29:17:3a:9d:ec:1f:dc:5c:a3:
cc:c0:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:27:49 2024 by rpki-client on console-fra.rpki-client.org