Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
File: V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer (raw, json)
Hash identifier: NMyw3k9Hhg9MDDYy97/X4RMNLlf9ngIZeWnbszgQfKA=
Subject key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01924C19E0F11398F7903D2445AACCD517FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Oct 2024 07:20:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29186
AS: 44897
AS: 49883
IP: 91.213.187.0/24
IP: 91.220.174.0/24
IP: 193.104.16.0/24
IP: 195.85.219.0/24
IP: 195.230.96.0/24
IP: 2001:678:abc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:19:e0:f1:13:98:f7:90:3d:24:45:aa:cc:d5:17:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 07:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:3e:11:5b:6b:bd:a9:32:96:0c:43:b8:26:
b7:12:df:24:32:3b:e5:b4:65:90:9e:20:30:f7:8b:
7a:fa:da:cc:6b:59:ce:fc:c2:b4:be:87:06:94:4b:
05:5b:0d:4b:fe:32:9e:ff:1b:93:e2:ac:57:a1:17:
26:f3:22:5a:de:b8:f8:1d:4d:ab:60:7b:e3:13:12:
e8:5c:2e:62:90:8b:8e:98:39:1f:1e:ac:19:31:24:
cd:61:70:00:4f:bd:3b:d5:af:05:44:48:e0:28:79:
e0:44:9e:c5:23:a8:09:ed:77:a2:e1:4a:46:c6:d4:
19:0e:f4:c3:11:c6:eb:34:94:ea:26:4a:84:9d:0a:
c2:7d:dd:b6:3e:8c:be:6a:77:28:98:4f:38:ba:0a:
4f:b7:00:e8:89:b0:9d:4c:22:06:60:b0:75:cb:f1:
de:d7:69:2e:98:8e:64:f1:55:3c:fe:64:ed:e4:0a:
48:31:17:35:3e:0f:02:ea:9e:3c:20:cf:d9:fe:eb:
90:bd:02:db:3b:74:46:6b:48:ed:0a:45:76:89:e1:
0a:0a:6f:8e:a4:6e:f3:c3:28:82:99:34:87:2d:41:
a6:cf:c8:24:9e:5a:0e:90:f9:74:c4:cb:d0:4f:fd:
2b:03:8d:d3:e2:96:3a:e9:56:63:3e:0b:fc:44:bd:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.187.0/24
91.220.174.0/24
193.104.16.0/24
195.85.219.0/24
195.230.96.0/24
IPv6:
2001:678:abc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29186
44897
49883
Signature Algorithm: sha256WithRSAEncryption
a0:29:05:9c:08:b1:79:64:47:11:5a:96:b5:36:40:d6:40:14:
99:e9:ce:7c:81:41:c9:6a:02:bb:4d:05:13:97:53:c7:e1:55:
33:ee:82:95:24:db:e5:e7:40:d1:89:45:0a:c7:cb:88:b5:ab:
de:9b:1b:33:2f:fb:73:4e:40:76:7b:36:87:6d:37:e3:5d:bf:
2e:d2:57:8e:39:96:c6:40:02:94:47:11:c4:18:10:fc:7a:5e:
79:fd:87:da:64:fe:5e:97:13:de:9c:e8:cc:36:f8:b7:f3:03:
f6:22:e8:d4:10:25:87:6f:1e:e8:66:b3:fa:ce:df:e7:01:9a:
8b:7e:be:24:6f:a8:cc:e3:b2:af:25:b5:ce:a6:fb:a0:6f:a7:
81:de:94:5a:a5:f3:1d:fe:b8:ff:69:64:ca:34:64:3a:b6:f3:
89:7d:87:3e:de:cb:7f:25:7e:bf:59:f8:d6:a5:44:8a:4f:f8:
89:79:4e:e8:b4:47:ad:fb:eb:eb:ec:3c:55:71:16:56:ce:ec:
8d:65:4f:3e:f9:96:94:72:cd:43:e5:67:cd:79:f3:ae:c1:8b:
c0:2e:75:70:e4:2b:60:9b:d2:62:e2:50:1d:ec:43:1d:30:c3:
f7:66:fe:43:23:9e:26:c9:1b:9d:b9:65:e0:83:c5:f8:36:68:
42:ec:a3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:51:07 2024 by rpki-client on console-ams.rpki-client.org