Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
File: G2uUO5o9_2loAVFr6EcbxFiFZug.cer (raw, json)
Hash identifier: wWZJpRRlepnNUaXjUDLr/jfAyPvANsRyzipEDRyiAoM=
Subject key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF66A12DA7701CD4BB5CB4F8A676C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49114
IP: 185.220.81.0/24
IP: 2a10:e900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f6:6a:12:da:77:01:cd:4b:b5:cb:4f:8a:67:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:2f:5f:80:c9:e0:3c:9f:31:f5:d7:e0:27:
28:b1:48:ed:d8:96:d0:19:39:37:17:b9:cb:4f:4b:
22:e3:ab:4c:d4:af:f9:ce:a0:c7:ef:ba:bb:fc:d5:
22:cb:d0:5b:3d:af:e0:04:e1:80:7c:33:d8:8c:e4:
2d:a5:e9:d6:96:6c:43:82:d3:c4:06:d5:d0:93:de:
4b:7e:90:a9:5b:5a:68:4c:b7:4b:70:4e:8c:9f:9d:
99:15:27:e5:ee:fb:d7:22:35:66:cc:ea:2a:36:ad:
29:53:ff:b5:3d:b9:34:ec:9d:c1:a3:6e:3c:49:28:
93:d2:fe:c4:78:d2:50:26:4b:ca:64:58:9c:98:f3:
44:5c:42:1b:4a:ef:ae:8d:07:a5:a0:bb:6b:5b:16:
7f:2d:16:43:8c:ca:c1:79:e5:e3:95:f5:1c:34:2a:
15:ae:8d:f0:7a:df:38:f4:30:86:93:4e:db:89:0d:
82:23:27:03:39:88:12:c7:3d:38:64:88:a5:46:6a:
93:df:f6:6e:c5:ec:ea:44:5d:40:31:94:16:d1:a9:
06:3a:d1:19:db:ea:85:f6:01:4d:b6:ca:ba:d2:de:
3c:6e:a3:25:63:cb:a3:dc:f5:47:6c:a9:7a:74:3e:
8b:cf:91:71:49:d0:ee:d3:4a:79:77:8e:59:0f:9b:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.81.0/24
IPv6:
2a10:e900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49114
Signature Algorithm: sha256WithRSAEncryption
2b:6a:a9:7c:11:a0:3a:3c:95:c8:30:ec:ab:9c:ba:22:94:c6:
6d:76:54:03:42:fb:01:2b:56:fb:00:0c:ec:c4:4f:c0:38:8f:
43:af:08:50:32:05:a6:e3:84:22:29:ad:d4:4c:3c:b7:04:42:
c5:93:d8:86:70:74:22:b5:b1:4f:df:41:3e:2e:62:bb:d3:7c:
46:24:4e:51:60:60:23:57:08:0d:52:fc:be:9f:e2:95:02:7f:
0e:99:a7:02:90:61:00:00:dd:a0:44:cc:2e:87:5c:96:87:89:
25:8c:fc:9c:e4:43:0e:2d:33:33:01:8c:f9:2e:fa:96:24:57:
58:6d:3d:be:b1:af:20:98:20:c0:35:b2:15:8b:5b:bf:cf:5a:
c1:54:f9:a6:3f:60:ee:20:90:b5:95:6f:51:4d:52:e3:1f:3b:
70:08:6b:b5:e9:e6:a7:0b:07:20:63:d1:61:3d:0b:ba:8e:61:
2c:9e:80:a0:dc:bc:bd:d6:4f:91:91:33:51:2d:5e:0d:f8:32:
58:0c:31:48:7a:94:5d:d7:4a:a3:e1:a7:d1:9e:b1:02:d8:d0:
2e:3e:42:1b:48:68:01:fd:e5:ec:8a:27:df:50:63:25:35:e6:
de:af:c7:30:21:a3:d3:a8:d8:00:84:22:6a:07:1f:d4:7e:6d:
47:70:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:58:13 2024 by rpki-client on console-fra.rpki-client.org