Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
File: RjadxdpeTnDHNbI1cE2evFglk0k.cer (raw, json)
Hash identifier: Gg5ZVw7VQijHexBXqR/Gg+qg6FWEZ1bs6TVDQbV/AQQ=
Subject key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE75E5DCC16CDCFC6463E1EF26DD87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3332
IP: 193.203.196.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:75:e5:dc:c1:6c:dc:fc:64:63:e1:ef:26:dd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:53:ed:c3:8d:0f:2c:1f:d9:09:85:67:36:
79:f8:0d:38:e5:2e:5c:ec:ea:5e:08:09:a4:a0:1e:
0b:e7:db:ea:d0:c0:2c:2a:c5:aa:0c:71:9b:7f:11:
13:a3:27:8f:6d:24:d0:52:39:d9:b1:88:4e:b3:a3:
22:56:90:d7:17:90:35:84:6c:63:7a:42:b1:22:64:
43:2e:00:e9:83:fa:d7:4f:a7:83:7a:20:5b:8a:aa:
f3:a8:c6:50:a1:20:05:36:dd:84:b2:28:5a:6a:62:
95:4c:c6:eb:ef:2a:5d:9c:c7:1b:c1:5a:1f:91:48:
e0:d5:f0:30:b7:b6:3e:c8:27:31:64:1e:9b:54:5e:
19:5a:28:d7:c9:47:35:90:58:98:89:0c:74:45:1d:
39:3c:72:74:42:2f:0f:28:27:4f:ea:c1:4c:fd:0f:
a2:35:ed:0c:ef:04:8a:1d:00:27:86:92:e6:00:8d:
e5:b5:38:e4:b9:3d:ab:28:68:74:b0:0d:23:b1:b7:
4c:0d:b6:dc:09:7c:4f:22:e6:01:03:fe:1d:e2:20:
7e:d3:1b:95:20:6e:29:32:f3:0d:9d:79:f1:68:70:
c9:7f:af:1e:5c:dc:fb:f5:a9:ef:ea:0d:2d:ab:0d:
cd:20:6c:af:44:8c:6b:56:bc:60:fa:ef:4a:06:3a:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.196.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3332
Signature Algorithm: sha256WithRSAEncryption
93:ed:68:0c:f5:ce:6e:c2:85:26:77:04:81:cb:92:c2:8b:e9:
96:03:d1:2d:3e:68:7f:23:c7:42:05:3e:3c:91:08:47:c1:21:
b1:b5:33:4b:54:9a:c6:df:93:3e:d0:80:44:bc:88:9a:6d:b5:
65:f0:a4:50:45:51:da:38:22:bc:42:d3:88:7d:34:9f:1b:12:
c1:ee:3d:fb:23:a5:fd:4c:87:f0:b3:91:dd:db:1d:73:6c:d8:
50:1e:b0:3b:bb:de:b4:a0:d0:82:aa:a0:53:12:c9:40:20:1b:
5b:ad:10:53:6e:52:76:90:94:16:a9:e1:d0:49:dc:1f:69:d3:
1a:1f:bf:83:02:4b:3e:02:4e:0b:78:2a:21:2c:9b:0e:e0:c2:
ec:48:28:fd:1d:f5:0d:b3:f9:5d:26:1e:dc:02:60:f9:71:0f:
4a:49:44:ea:e0:dd:e3:de:19:14:ae:a2:58:12:ed:23:3d:61:
27:f9:f8:6b:13:fb:c3:fd:e0:f8:09:a3:92:e1:fa:fa:09:86:
30:20:e4:d7:bf:da:1b:22:16:9c:a7:fa:38:59:e3:77:c0:49:
ef:39:c8:db:eb:a9:8f:6b:8d:ca:6b:d6:cc:9c:fe:6f:bc:7e:
fc:28:49:b7:cd:cd:85:5b:4e:52:74:2e:0f:5c:2d:7f:f5:14:
2d:01:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 13:56:52 2024 by rpki-client on console-ams.rpki-client.org