Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.cer (raw, json)
Hash identifier: DUMgBTmARyBaIIDV+sXmq9vK3sdZGDIc/EwG325tq3w=
Subject key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9174CF204ADC31679C89BF0BBBC6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208237
IP: 185.15.124.0/22
IP: 2a02:fd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:17:4c:f2:04:ad:c3:16:79:c8:9b:f0:bb:bc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:6d:85:0f:4f:03:f0:59:4e:fe:63:60:8c:
13:49:87:34:69:38:7a:7b:86:47:b8:39:a1:2e:71:
fe:1f:b3:8a:d7:10:16:f9:58:09:99:61:9c:6f:32:
51:eb:ff:d7:80:0b:e1:7b:86:22:55:3f:85:11:cf:
ab:ad:fa:f4:61:71:13:c0:cd:6c:be:58:25:22:46:
02:70:25:de:9e:08:e4:b5:f5:21:78:22:b0:ef:9e:
6d:f9:63:f7:e7:a3:f5:56:b4:42:eb:62:b3:7a:22:
e2:8f:6c:77:bc:ae:36:31:1a:18:7f:45:7b:60:78:
10:da:e8:90:d0:36:ce:09:4d:48:1e:27:b7:fe:2a:
30:91:0d:da:40:b0:24:e3:df:6c:76:d2:c3:0e:07:
98:49:48:c4:b1:81:86:e2:83:de:8b:64:9d:b6:c9:
fd:aa:47:3a:dc:17:5f:f4:e0:ce:c3:5c:c1:36:8f:
15:7a:3d:fe:fe:12:9c:5a:17:d2:69:e1:77:19:58:
4e:d3:69:1f:9d:24:db:2e:55:4e:71:2b:82:d1:81:
fe:a8:b8:ae:b7:3a:e7:45:ad:75:0e:3c:60:b5:90:
16:94:cd:52:7a:c2:0a:63:2e:c4:7a:5e:f3:36:50:
8d:12:0f:88:bf:e6:32:22:6c:b9:9c:ce:aa:44:f0:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.124.0/22
IPv6:
2a02:fd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208237
Signature Algorithm: sha256WithRSAEncryption
99:7b:a4:b4:ad:a7:e3:dd:ed:c0:6f:f7:09:68:dd:4a:f2:2c:
b8:ee:cb:92:b8:dc:47:3e:ce:27:16:ed:f8:ee:58:ac:90:e0:
7e:3b:1a:d8:00:8e:de:7c:dd:34:e7:3a:01:bf:c4:cb:fd:0c:
8b:47:90:32:76:58:69:50:69:c6:f9:cc:a8:b2:6e:0c:0f:ea:
97:83:0c:11:71:e9:3c:81:75:86:e8:cc:0a:5e:16:51:07:eb:
32:a1:11:3e:fa:67:9c:c1:81:e0:b3:6a:3b:56:e9:f5:62:85:
7a:cb:f1:00:5e:a0:bf:49:f6:90:0e:6e:85:b6:46:7c:6b:3c:
8e:bf:24:9a:fd:f8:65:81:72:14:6c:09:92:c2:b1:ef:86:f1:
46:97:21:6c:1b:62:2b:10:34:59:66:f1:a2:e8:87:fb:04:99:
29:38:27:7d:bb:d0:88:61:9d:1a:e0:5b:de:52:36:95:dd:2a:
0d:27:6b:86:51:20:53:2a:c2:0d:90:ca:6b:21:f4:d5:af:2a:
cd:ea:b9:5b:c5:e1:71:48:92:a2:74:ca:77:fb:74:06:28:2d:
77:0e:00:00:aa:94:5f:da:93:23:94:b8:44:f4:6d:76:31:47:
a2:3a:83:bd:86:8b:55:70:89:9a:f4:35:57:d9:f1:02:74:75:
46:6d:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:14:41 2024 by rpki-client on console-fra.rpki-client.org