Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.cer (raw, json)
Hash identifier: 8xoopEwO8U5LUuwkw094uvOfYxM92UC2Ifqq8ZhCJ4A=
Subject key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E3E20E04627290DD0C6EE988043D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47895
IP: 78.142.232.0/22
IP: 91.205.128.0/22
IP: 185.34.20.0/22
IP: 185.189.100.0/22
IP: 185.244.20.0/22
IP: 2a00:cf60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3e:20:e0:46:27:29:0d:d0:c6:ee:98:80:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:23:09:aa:96:01:b9:1f:60:d5:67:d4:3c:
80:63:00:f4:94:d3:52:4a:bf:4a:d5:70:f1:64:59:
39:a0:9c:40:f7:9e:e3:ad:3f:be:9f:5b:64:23:e2:
ad:55:bd:b9:ec:e4:dc:4f:dd:07:b7:b6:6e:42:06:
b7:95:75:e9:54:24:64:4d:84:e5:c5:63:20:99:ca:
40:6d:3b:8c:c0:15:2c:44:45:b0:1d:86:3a:f8:2f:
64:0f:d9:83:fb:f1:b8:f1:c5:d4:0e:3a:ed:f2:25:
32:75:b6:57:b0:ae:2a:12:a3:48:66:98:c8:cf:3f:
0b:26:dc:54:cc:d5:8f:ef:bd:ab:9f:98:d4:9f:d2:
8c:d5:a6:78:1e:c9:93:6d:a3:29:b8:ab:6f:b4:80:
16:bd:bd:5b:f1:a1:17:38:af:95:7d:91:d5:fe:1c:
13:20:2d:d2:a9:ee:b5:ae:81:50:b5:57:70:0c:00:
dc:7c:be:86:aa:c3:36:d4:1e:bf:54:f5:f7:bc:cb:
a1:d6:0e:97:3b:30:6a:a2:9e:f9:df:c7:74:20:c1:
47:f9:67:23:f9:53:64:da:28:ea:bc:1f:51:77:5a:
be:fd:57:14:83:e7:e0:61:03:08:8b:4d:6a:a1:fe:
40:aa:11:b9:23:9c:9e:bf:06:35:46:5a:6f:81:6b:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.232.0/22
91.205.128.0/22
185.34.20.0/22
185.189.100.0/22
185.244.20.0/22
IPv6:
2a00:cf60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47895
Signature Algorithm: sha256WithRSAEncryption
3a:a2:b4:ad:70:93:fa:c9:4c:f0:90:ed:1b:17:ac:f0:c3:3f:
b8:76:ef:4b:1c:56:45:f7:df:6d:c8:78:87:fc:20:88:6b:31:
c5:18:cd:9c:bd:c8:96:6b:81:5d:d3:0a:45:52:f8:7e:a9:64:
77:a8:c9:ff:9d:80:b4:0e:fb:1e:9b:a3:9e:10:49:29:60:ec:
8e:4c:1a:21:c6:80:51:14:c8:32:87:96:6a:b7:e3:5f:53:37:
08:a2:c5:bc:15:47:d1:bb:07:8e:2a:2a:9d:ef:dc:f3:ab:7a:
01:06:34:01:03:31:e1:22:ac:df:aa:ac:43:2c:d4:38:4b:e5:
d3:f4:60:48:34:ef:c9:16:b5:31:9b:c8:f1:dc:87:0b:8f:8a:
11:18:32:64:c4:23:4c:25:0d:c7:b0:4b:7a:3e:23:a7:30:f9:
66:69:5d:76:87:fb:cb:f9:65:80:08:6a:c7:36:5f:31:b1:0e:
40:9d:f4:d6:d3:50:0f:7f:52:e9:a3:b6:43:aa:2c:65:bb:a1:
82:eb:bd:35:62:c7:fd:88:33:5b:ca:30:1e:6d:33:a0:e9:d7:
71:01:10:94:c3:49:58:50:7a:46:f4:a2:85:00:ac:96:70:c8:
ac:75:f2:13:68:98:e8:45:8c:06:a1:5a:fb:90:da:a1:92:d9:
ef:14:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:23:08 2024 by rpki-client on console-fra.rpki-client.org