Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.cer (raw, json)
Hash identifier: 2MEX959jA88uh+PqtgyCNm+dsJNnppX0TyhCz25aas8=
Subject key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50014F0C0283213F6EFF83267EF2D96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49796
IP: 185.167.72.0/22
IP: 2a0a:900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:14:f0:c0:28:32:13:f6:ef:f8:32:67:ef:2d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:ab:77:1c:5c:c1:6d:f3:92:4c:fe:f2:e8:
c2:74:f9:ad:8f:7d:ac:9f:10:1f:6f:11:39:2a:2b:
3b:1b:0a:da:00:11:6d:bf:9b:02:6f:96:b6:84:85:
e2:15:99:5d:53:46:a9:81:bf:77:b6:80:b7:c6:19:
11:78:54:30:d8:f3:8f:88:a7:ad:af:57:52:c1:1e:
81:db:65:12:0f:61:95:c3:ba:d6:27:f0:d7:15:dd:
4b:a0:5d:fe:d9:3a:63:60:ba:b3:ee:31:b8:00:9d:
3a:11:db:e9:c5:27:b9:bb:00:c0:14:1f:58:c1:df:
14:37:f9:06:1f:c8:b5:38:f9:60:cb:76:f4:9c:2c:
0d:37:ac:4d:d5:34:59:c7:f8:86:fc:ac:b1:3a:d9:
4a:4e:de:48:af:4e:1e:79:5e:51:1e:9e:d6:6e:0b:
51:b0:01:21:34:f4:3d:51:d5:e5:42:91:d5:5a:52:
80:e6:7f:b9:a8:2b:5e:bd:b6:b4:75:fc:b2:87:31:
d5:93:83:18:51:04:3a:34:13:1f:d1:62:52:bf:eb:
14:e5:bc:9f:60:16:9e:89:c3:55:8a:ab:fb:5b:26:
8b:6d:c7:4f:e6:9e:53:1c:52:fc:3a:a8:ab:89:3a:
9f:da:fd:fb:eb:f6:d4:ca:39:bb:57:20:e2:10:65:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.72.0/22
IPv6:
2a0a:900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49796
Signature Algorithm: sha256WithRSAEncryption
b0:93:dc:4e:e3:94:13:46:62:97:65:21:de:87:c5:62:c4:17:
3d:f3:9a:8d:6d:27:8c:03:61:bb:53:04:e9:d3:e8:87:6c:31:
8e:b9:4a:6e:bc:96:39:30:16:bf:07:d9:4d:85:80:6f:71:7b:
a9:8f:90:3f:b6:77:5a:f2:71:be:b2:40:2f:36:e1:1f:3b:3b:
aa:fe:57:78:76:9f:80:98:a1:47:ad:52:15:ca:0d:d8:fc:11:
f1:6e:31:25:d7:22:be:72:2d:2b:8d:c9:77:81:7f:db:6e:89:
f5:b9:a5:4f:2d:ec:9b:c3:2b:cf:28:7f:62:62:2c:1c:bf:5c:
f1:cd:0c:d3:15:0e:5e:42:c7:75:d3:89:47:6a:ab:53:66:8a:
80:20:ab:44:6e:e8:ea:b1:eb:16:60:14:17:f5:86:d9:43:d4:
09:4c:f9:6f:32:46:3a:5c:48:73:5c:ec:43:5c:b2:c6:cd:58:
73:a2:87:4d:15:b4:ed:bf:42:38:fb:d3:b9:a3:73:eb:7b:af:
78:7f:ec:1e:b1:57:62:3c:e3:f2:67:be:b7:4b:33:9f:45:82:
ea:51:25:bb:d1:47:3e:83:6a:74:7f:38:36:3d:40:61:5a:11:
5c:a5:ad:be:de:6d:49:df:59:39:c6:2e:36:cb:50:68:61:84:
4e:26:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:29 2024 by rpki-client on console-ams.rpki-client.org