Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
File: GbsyomYvkFwNi_JH7ODbxnmha4Q.cer (raw, json)
Hash identifier: rszZxaVz1Rr2AIAG11p2Oskd0KOTvOJzS6UyvRYKp1Y=
Subject key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019242701AE0CC4392EFBC35AE4217B4D76B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 30 Sep 2024 10:18:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.104.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:70:1a:e0:cc:43:92:ef:bc:35:ae:42:17:b4:d7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 30 10:18:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:29:73:51:f0:f7:0b:c7:74:61:5a:e2:d5:
32:40:8f:db:29:dd:69:f5:d5:7a:8f:06:be:f8:22:
3c:47:03:bb:11:26:69:ec:52:25:34:99:e5:d6:78:
b1:de:9f:4a:f7:22:67:22:d6:43:fd:d2:51:2e:69:
5b:17:34:7d:18:ce:ea:b3:aa:90:61:a7:2b:64:a5:
fb:3a:ab:47:17:cb:69:4b:b7:d3:5e:80:cf:0d:35:
97:b3:f2:82:ce:a6:c2:05:2c:ef:56:5b:86:9c:a9:
1a:8c:77:31:b1:62:b7:a4:39:bf:94:21:ca:5a:d5:
ba:00:65:b6:34:42:57:53:ad:69:7d:71:ed:17:1f:
27:e3:d3:9e:8a:e1:c0:3e:2c:62:b1:37:36:08:ff:
2a:53:21:d4:e4:dc:4f:37:5e:41:e5:58:60:25:51:
a5:3b:59:70:93:51:1e:77:07:32:f2:a2:42:8d:8a:
0e:5d:39:5f:c5:17:cc:e6:51:ae:fe:ad:21:17:29:
3f:f9:38:c8:df:1d:5f:d6:af:7c:01:15:0c:d5:2e:
40:e9:ba:46:4a:59:85:e4:fd:b4:38:cd:c6:09:de:
2e:ee:a5:8b:fe:18:94:48:d1:e9:1f:e3:e5:81:c1:
60:63:ae:82:82:00:0c:6a:a3:bb:bd:de:c0:7f:1c:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.104.0/24
Signature Algorithm: sha256WithRSAEncryption
81:47:ba:8c:ba:db:3c:d5:04:c5:bb:7d:09:43:2b:80:f6:ee:
5a:07:1e:68:ad:ac:da:b7:d5:66:a0:65:19:7d:fe:5b:2b:53:
ec:d7:f1:1b:0c:1e:62:0b:11:55:12:bb:22:7f:27:ea:3f:9d:
4f:fe:8a:9d:ee:d3:4f:aa:01:61:af:24:02:bd:f3:43:39:09:
f7:0d:28:cf:c2:cb:ac:b3:24:3d:85:16:76:af:e5:c7:76:94:
88:a8:1b:e9:84:6d:18:d4:20:bf:11:ab:8e:80:a0:c9:91:5e:
81:55:60:cc:86:b1:1f:77:01:d0:3b:c3:bf:78:13:9e:66:10:
3c:10:ac:18:09:57:b8:0f:0d:18:94:7e:1e:29:41:17:20:a2:
a0:a8:57:63:0c:2b:7c:53:2b:cd:94:eb:cc:b2:fa:8d:56:37:
cb:49:2e:3f:fd:28:67:25:e8:8b:20:2d:a5:c9:57:66:9f:71:
72:31:f1:51:07:f9:20:f7:d0:f8:81:ca:f0:29:15:ff:1f:9f:
74:f6:66:e0:e4:88:49:20:64:df:39:54:4d:a8:04:76:34:d8:
de:25:b4:8d:75:70:8c:bd:d5:25:e7:5f:96:ad:61:bb:30:ec:
fb:1a:2b:97:f6:3c:7f:d5:fe:30:31:50:0e:94:7c:de:88:ec:
17:65:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:37 2024 by rpki-client on console-ams.rpki-client.org