Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer (raw, json)
Hash identifier: S6piUNMIaX84aOI8MpWxaMjic1x205KIaarh9+nvzMI=
Subject key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D951833ADFBF7C0EF2F0074734DEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59464
IP: 194.49.32.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:95:18:33:ad:fb:f7:c0:ef:2f:00:74:73:4d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:a0:69:a0:ca:ca:d4:52:bc:2d:58:e2:02:
cd:3e:36:68:d7:52:14:b6:6f:81:66:29:24:47:1c:
ca:b7:e4:bf:26:ed:72:d9:c3:2c:22:0d:8f:02:1b:
e1:b1:b9:02:22:55:5e:d2:7d:58:0c:d4:fa:8a:ca:
0b:dc:2b:aa:3e:1c:db:72:95:74:7a:81:cc:07:2f:
c2:a6:cd:ee:5d:d1:65:c3:0c:48:7e:74:40:89:f2:
6c:48:35:5c:25:3f:b8:e3:68:b7:3c:cb:97:11:c6:
3d:e3:2a:61:a2:fa:c5:c1:24:74:f2:98:9e:10:65:
4b:c2:2e:93:87:7b:d7:6b:40:1c:30:1d:06:7b:04:
9c:fb:d7:dc:e7:3d:db:7c:c2:94:27:4b:58:31:ce:
09:b4:31:84:2f:0a:43:f2:31:9b:41:4e:08:e8:10:
cf:f1:34:09:77:21:a0:68:34:15:ab:e3:4e:32:f5:
38:5d:74:58:15:52:94:17:8c:c2:20:d0:90:57:6f:
ee:fc:69:9a:e1:bb:b7:b2:24:dc:55:9f:1b:9f:a7:
b8:f1:a3:fe:3b:6a:3a:b0:8b:e8:a1:cb:f6:a7:7c:
82:95:01:a0:f4:62:b6:6c:89:24:ea:67:ec:2f:fe:
9e:0b:61:c5:67:24:6b:e8:be:9c:4c:9c:6d:fd:05:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.32.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59464
Signature Algorithm: sha256WithRSAEncryption
50:a5:92:18:7e:c6:91:a0:4d:62:31:17:5d:a9:c7:22:e9:49:
e6:84:8a:36:28:4f:3e:70:31:03:dd:b1:55:cd:30:50:8a:4c:
db:39:47:b4:12:61:63:fc:c8:a3:51:61:49:1f:90:53:85:98:
4f:bf:34:e6:62:7e:e9:28:5f:52:4b:c9:6f:22:e9:be:97:89:
43:eb:76:5d:e5:25:5d:b7:eb:2c:69:37:5d:2b:ef:2d:20:7d:
31:89:ac:a3:f8:6e:bf:a6:20:2b:8d:ca:4d:12:04:d9:f7:7e:
99:a6:39:4f:4a:5b:58:26:53:19:67:57:b2:ad:bf:30:50:34:
b7:56:76:64:28:f3:46:3f:bb:31:56:6d:66:4c:82:ea:9d:00:
12:70:54:49:33:1c:27:c4:eb:d6:35:80:a9:b6:2d:28:86:e9:
51:17:ce:3c:bd:0a:21:2a:f8:d0:38:9a:96:c7:17:0d:93:72:
c3:e0:d7:94:f1:d9:68:94:e3:2b:c7:fa:71:13:1d:f9:3b:c1:
76:00:23:6c:35:59:51:f6:38:1e:11:f2:0f:be:05:f6:96:27:
e0:28:4d:b2:8e:4f:05:b6:1c:18:ae:e4:dd:56:7e:ac:e1:52:
26:3f:f9:73:c6:20:61:98:69:4d:b9:95:a0:5e:4b:0b:3b:e6:
64:1b:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:58:40 2024 by rpki-client on console-fra.rpki-client.org