Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.cer (raw, json)
Hash identifier: xy9tjTbf2drKDJ+y7fhutQW5gidG5Khtxhuxrhpm9GU=
Subject key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EFDF92FC38C480AA7D945E21F2262
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43581
IP: 46.253.143.0/24
IP: 91.211.115.0/24
IP: 193.17.92.0/24
IP: 2a11:1940::/29
IP: 2a13:17c0::/29
IP: 2a13:a500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fd:f9:2f:c3:8c:48:0a:a7:d9:45:e2:1f:22:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:24:5c:14:a3:6b:13:be:71:a4:7b:bc:ff:
83:10:73:be:04:01:97:f6:43:81:e2:46:df:c2:ed:
bb:d6:f7:a6:53:18:80:34:ca:61:80:75:b1:16:af:
61:36:5d:96:52:18:d2:2b:f6:a9:6c:b3:b9:c5:42:
9f:13:a7:41:0e:1e:e4:35:4c:02:3f:e4:1e:5f:ae:
55:07:0a:7b:28:92:7b:b0:a4:4d:95:73:71:bd:ff:
e2:78:fa:e1:1c:68:18:b9:4e:90:5b:e4:cb:c2:41:
8a:3c:a2:fa:ac:6f:fa:a3:2a:1b:db:97:3e:af:fb:
39:fb:fb:49:bb:bd:28:47:91:5f:0d:de:b1:e2:78:
ab:46:ca:d9:c4:57:94:ae:2a:53:4d:e7:44:c4:0b:
81:a4:05:63:cf:72:9b:f4:d1:4b:aa:4f:bb:d5:3b:
62:f8:14:38:83:9f:0c:5e:e8:db:1c:6d:50:46:6e:
5d:85:6c:3f:02:1d:07:9f:36:c4:c0:54:0b:1f:1a:
19:5b:d0:07:de:02:a0:66:01:43:7a:4b:ff:18:07:
34:ee:1d:88:75:50:dc:18:82:49:17:9b:ae:55:56:
72:ca:5f:1c:d7:17:f7:85:35:ed:13:a0:c8:bf:1d:
02:1f:ea:23:55:cb:16:a7:c2:5a:f6:bd:1b:f0:23:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.143.0/24
91.211.115.0/24
193.17.92.0/24
IPv6:
2a11:1940::/29
2a13:17c0::/29
2a13:a500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43581
Signature Algorithm: sha256WithRSAEncryption
76:f5:62:ce:de:b9:fc:29:f5:c6:1e:7f:08:03:b4:af:44:33:
2b:49:4f:15:bf:55:b0:f6:05:25:da:26:38:34:5f:61:2e:a4:
1a:d6:b2:d2:7a:51:42:a6:fa:28:bf:66:5e:77:f0:27:19:c7:
5f:11:5c:ab:14:29:20:fa:c1:85:ad:99:98:6e:a5:98:d8:43:
b4:51:f2:06:46:64:9c:ce:d1:c3:6d:0b:f8:63:10:dd:1d:f9:
10:eb:74:10:db:6b:b5:72:54:41:b2:2f:92:61:a6:09:fd:45:
34:38:e8:91:ab:5f:44:a8:62:aa:8d:32:b1:17:c1:ae:00:37:
49:f4:30:c9:ca:dd:34:41:62:b1:3f:7a:6f:09:47:0e:4f:e8:
a2:13:1a:2f:36:43:f7:11:c0:33:aa:5f:4d:30:49:d5:09:b6:
c9:53:00:f4:85:73:df:49:03:0e:65:32:96:a6:02:4f:54:f9:
04:48:71:d4:9e:03:be:cb:91:12:3c:a4:64:30:46:e0:a9:82:
6e:27:cf:c2:b1:e7:2d:fc:29:93:be:2e:85:17:1e:bd:32:be:
17:91:25:4f:2b:11:95:32:ff:8c:b0:d0:9a:ad:0b:bd:95:b2:
d0:58:ba:42:b7:4c:69:49:e8:04:80:b8:5a:d8:fc:53:28:4b:
05:79:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:13:51 2024 by rpki-client on console-fra.rpki-client.org