Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer (raw, json)
Hash identifier: cBw81F1N4HblWic+DFL9K8fwWPxqeVbyrYxjiJFPZ2I=
Subject key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC63C64F10B6F8566A5604ED96EB4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44548
AS: 51222
IP: 91.220.199.0/24
IP: 195.54.36.0/23
IP: 195.93.156.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:63:c6:4f:10:b6:f8:56:6a:56:04:ed:96:eb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:be:6c:1a:28:e3:86:e6:a3:e1:30:a9:f3:
0e:a0:55:b4:f1:3d:31:28:d2:d7:68:05:e6:86:07:
84:b9:1d:b6:8b:c6:c7:47:90:c5:3a:a1:04:2f:ff:
3e:62:36:c2:5b:9a:69:f1:83:0f:7c:de:79:19:31:
dd:e1:96:39:3a:f8:57:33:60:cd:f9:0f:e8:c9:b7:
39:bf:66:6c:13:b8:bc:6c:44:33:ce:72:c4:52:bc:
45:aa:ac:22:51:1f:6f:78:d2:f8:90:06:85:d5:80:
ac:e5:52:b8:e2:c0:c2:b1:93:5c:f2:d3:a6:7f:e3:
af:87:f3:b3:48:a1:6a:27:c5:63:4e:56:ff:e4:56:
40:c8:f0:f5:d8:11:73:18:72:32:b6:02:76:ae:59:
7c:6a:48:45:c2:53:df:4b:72:aa:5d:c4:b1:22:98:
28:8c:2d:8e:e8:d9:24:c6:e6:84:e7:4f:5e:b0:14:
f8:b2:18:c3:d3:39:38:ac:f5:72:a2:da:f0:15:b2:
76:ef:d4:6e:16:c4:0e:ee:9b:09:39:57:a5:b0:22:
cc:a7:ac:da:4e:17:92:58:03:24:b4:b3:2f:fd:19:
ee:42:19:33:d3:8d:0f:c2:67:13:51:f5:d7:2d:3a:
fa:a5:cf:a6:cb:d7:74:bf:bd:6a:6d:9d:fd:30:2e:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.199.0/24
195.54.36.0/23
195.93.156.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44548
51222
Signature Algorithm: sha256WithRSAEncryption
40:b8:fc:07:56:2e:3f:1c:e5:f5:0e:c1:10:ca:68:d3:86:a5:
74:7a:99:5c:23:4c:9b:c5:94:d7:42:52:f6:67:97:35:b8:10:
b0:5a:0b:c8:7a:a3:8c:8e:1c:88:22:45:54:7b:9a:70:39:af:
6b:d9:f8:3b:cb:60:67:d6:27:f3:7f:13:5e:25:2f:da:08:9a:
bd:c1:4f:46:9c:76:ad:42:9a:b6:7f:29:63:3a:a7:82:fd:43:
19:67:a7:70:1b:69:af:49:69:e8:60:4a:40:5b:f5:2c:c8:60:
0e:ed:e9:87:82:d6:c7:bf:07:e3:fc:c5:48:85:85:a1:7c:0d:
ae:84:00:a9:58:fa:4a:b3:a0:3b:9a:57:db:47:4c:5d:65:61:
ea:3b:a6:66:8c:d8:e2:70:99:79:41:76:ea:7c:8a:57:60:1f:
5f:e2:53:9b:5c:a5:bc:4e:22:25:1d:65:15:3a:1a:3e:16:80:
0f:e0:50:4d:78:e0:15:da:0b:1f:fd:60:be:66:61:80:13:5b:
49:d0:e1:f8:ec:2a:f8:ab:6a:db:e5:09:1b:56:69:47:62:12:
ea:97:2b:63:d2:d4:23:08:54:a6:39:fc:4e:09:f4:f3:6f:09:
54:28:bb:87:db:55:90:e8:e1:aa:ab:00:4c:1f:6b:2b:1a:48:
77:b2:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:16:55 2024 by rpki-client on console-fra.rpki-client.org