Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
File: GsBs8snpV1N0OXNPBYSoIEp7gxE.cer (raw, json)
Hash identifier: vGrFxGRffjH7Ruetc0YzWkVLLd+2yBdoJIQyrwzH3Ic=
Subject key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCAC6D2882DB05D8F0ACAA7374E5B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 134.110.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ac:6d:28:82:db:05:d8:f0:ac:aa:73:74:e5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:b9:5b:0d:6a:4e:2f:03:c5:52:95:24:e4:
ef:b2:72:7d:f9:8c:c1:19:06:42:71:94:38:96:b7:
a7:a0:1c:bc:90:bd:9e:6f:2b:47:77:1d:1c:7d:e1:
d2:4c:95:23:5a:bd:5f:4e:dc:0e:e1:a9:b2:e2:d8:
9b:62:37:80:64:0f:b8:f1:17:30:83:a1:8c:79:6d:
35:ae:c7:fe:da:d2:c4:e2:15:57:3c:7f:05:83:dd:
06:57:5d:25:2c:55:95:d1:3e:29:df:80:31:d0:dd:
ef:9a:12:55:e2:fc:60:07:c4:39:ec:36:2c:80:bb:
de:9b:98:1f:a0:7a:bd:b9:c3:60:21:14:39:dc:8a:
7e:3a:cb:f1:3d:6b:7e:db:c3:1d:d3:dc:a5:01:b7:
8e:44:ad:bd:95:72:6c:1b:77:57:c3:cb:a3:63:66:
b8:19:60:95:2b:c0:d5:3d:5e:f2:43:27:96:7c:32:
87:1c:64:15:82:85:a9:11:ef:dd:f8:a8:14:0b:6f:
07:3f:84:3b:43:bb:ef:74:db:b7:1f:20:70:d1:74:
2e:42:56:ba:8d:53:a1:85:39:e2:54:9d:b9:6e:a5:
7c:92:06:0c:58:f2:aa:23:f3:40:e6:34:6a:d2:d2:
67:88:38:f0:b8:e1:9b:24:f6:3b:0c:91:dd:5d:52:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:bb:34:b2:a3:ec:19:17:a5:08:da:d7:70:0c:74:ad:9a:fd:
f9:9d:98:84:78:41:dc:12:c4:d6:a3:37:14:49:11:7e:04:75:
1c:98:91:cd:6b:c3:a1:85:19:93:99:d3:ad:87:3f:d2:ad:34:
9a:4e:60:2c:0b:37:c8:0f:c1:ad:5c:34:99:b6:61:df:11:ca:
a3:ed:16:90:8d:38:f5:a3:52:d5:8c:15:bb:bd:b9:f5:f2:f4:
2a:d3:23:87:bc:ca:ee:07:93:61:17:30:09:69:53:ad:6a:ec:
ac:7d:49:0d:fb:4f:1c:8b:0c:da:78:3b:0f:bf:6f:ca:c8:96:
8c:63:70:11:32:87:91:65:e3:d8:f1:95:44:45:15:ca:4d:1a:
8a:91:af:53:0e:c3:e7:ad:6c:3d:e1:f1:8f:be:64:a5:02:41:
2a:d6:20:36:a3:3d:f1:c8:31:e2:b1:ec:c5:f2:59:f7:bc:91:
92:6d:7a:49:57:14:12:0f:8b:46:91:ae:b7:97:47:45:a2:44:
a7:c2:02:23:0b:87:b3:b6:a5:75:d1:60:22:bd:1f:6a:1d:08:
e9:b9:39:e5:19:10:b5:16:2e:fc:de:55:f6:e2:b5:bc:9e:fd:
38:b6:4f:94:d8:ba:42:c4:12:e3:0e:54:62:5f:6c:61:56:b3:
65:ef:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:13:38 2024 by rpki-client on console-ams.rpki-client.org