Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer (raw, json)
Hash identifier: rUVUSgsCkxaq/jE+hniHTmulvXGyTyq5ToJ4V8nG1NE=
Subject key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAF383C0C8BF8E9388D0571368308E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61984
IP: 185.51.176.0/22
IP: 2a01:b0e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f3:83:c0:c8:bf:8e:93:88:d0:57:13:68:30:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:37:f9:4e:15:10:3c:ff:6c:c3:3c:30:54:
78:af:99:c3:25:d2:dc:aa:c7:eb:8a:d9:36:da:da:
9d:4c:16:97:a5:db:ed:44:41:d4:cc:06:ec:de:4c:
a4:b4:64:4b:ab:84:b5:ff:4c:c1:e8:1b:ba:9c:15:
6f:2c:f8:07:e3:85:22:c9:b0:4f:30:59:a1:0a:26:
37:cb:93:54:0e:bd:44:b7:3d:f9:fc:a7:2c:e0:8e:
66:08:d2:c4:c3:a4:ee:44:d6:ee:c6:21:c5:4a:2c:
56:64:89:d3:b3:c6:23:fc:f6:68:9e:19:ab:83:87:
6d:13:96:40:59:01:5a:b3:e8:b3:37:1e:e6:53:b6:
11:ee:f4:e2:38:51:bb:f8:57:34:f6:a2:21:fe:50:
49:9c:f1:4f:14:34:d8:ea:a2:b1:57:f8:12:48:a5:
3d:08:8e:e2:53:f9:2a:49:27:74:28:96:97:b3:bb:
33:5e:92:9d:88:26:06:e6:7b:02:3f:e3:be:c5:18:
a2:16:9f:91:5e:72:05:71:91:dd:2d:2b:c2:91:51:
64:3e:0d:13:eb:57:0d:b6:16:de:a9:f4:d2:95:35:
34:50:57:fa:f2:eb:81:e4:ef:60:3e:84:59:ad:0d:
bb:4a:aa:0d:de:06:71:d5:60:22:e6:64:2b:0d:ea:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.176.0/22
IPv6:
2a01:b0e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61984
Signature Algorithm: sha256WithRSAEncryption
11:1f:08:a2:4e:a0:2f:20:20:cf:2c:06:4f:2b:dc:63:49:a1:
52:6d:59:42:dd:c5:a2:6b:84:85:f0:b0:d4:07:77:03:0e:97:
39:89:70:86:dc:ca:35:62:33:55:ea:13:d0:a6:57:dd:e4:4b:
f1:4b:ff:55:3b:57:cf:f2:a3:3a:10:2b:d2:a3:15:d1:14:23:
e9:6f:76:21:c1:fa:6a:38:8d:2f:83:b5:12:c1:94:4f:87:a5:
60:b7:58:f6:c9:6c:48:18:5e:75:4f:fc:ae:15:cf:94:93:0f:
f1:db:1b:b7:de:c2:bd:ab:f6:a8:25:7c:35:29:a1:30:33:91:
6e:ab:1a:0c:f0:61:35:48:fe:f7:76:81:53:4f:67:f4:8b:d8:
dd:25:a5:69:1a:fe:6b:56:ae:86:ed:72:53:53:4c:04:06:88:
e2:7b:ea:bd:17:cc:78:83:e4:28:40:6e:bc:1a:45:de:6c:b5:
0a:7a:d7:61:17:11:0a:ff:55:5c:6c:cc:74:2a:ea:b7:bb:09:
b1:4b:0e:ff:9d:5c:a8:9e:66:06:f7:3c:2f:f8:82:d6:a4:69:
11:fb:6d:1b:17:5f:25:df:35:6d:63:f6:89:9b:de:43:a3:59:
c2:63:76:23:dc:b2:78:8d:49:ea:8d:b3:a4:e3:c0:45:58:6b:
1d:9c:d6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 19:10:46 2024 by rpki-client on console-fra.rpki-client.org