Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
File: _s8oKCHaV19okXZHzz4YmPnQpio.cer (raw, json)
Hash identifier: QgtHGRSx3aCOtM7JViSg+up5nAdnxqSCYDCguzpWeqQ=
Subject key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CFC4179437302C6F5417A56D3A933
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59560
IP: 176.116.145.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fc:41:79:43:73:02:c6:f5:41:7a:56:d3:a9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:48:e4:11:4a:66:d7:e5:06:cb:7a:7b:84:
64:0b:06:d2:9a:07:51:b7:75:27:56:74:32:1e:1b:
43:db:4f:84:a3:78:ce:c9:9a:21:90:99:42:cf:77:
8c:0e:60:b4:2b:66:48:08:db:b4:fa:c1:f7:00:3c:
7d:40:be:0f:45:0e:05:1e:9e:32:48:87:a5:09:41:
ff:85:c3:c9:bb:13:b7:c7:50:35:06:31:79:3b:17:
4b:c1:3a:78:8d:70:cc:31:e6:f0:4a:75:32:89:fa:
0e:23:32:ba:ad:01:c2:25:4b:9b:12:09:8c:ba:e3:
ae:39:be:8c:13:99:00:63:b4:2f:6c:c4:e1:2b:1b:
00:56:c3:90:4d:71:4e:6e:61:06:44:d7:4e:5e:5f:
42:09:ad:19:96:87:81:63:7c:fd:c7:24:b1:14:5d:
55:fb:d9:80:62:ab:e2:73:1b:71:a2:f6:d8:2c:2a:
b6:11:bd:f5:a9:94:36:e8:e9:e9:6a:e7:2e:38:2e:
44:bb:4d:4e:6f:b0:8b:d6:ba:cc:8b:19:3b:4b:59:
e6:a8:89:6b:f8:fa:df:d5:97:63:01:3b:f3:13:db:
72:cd:32:85:af:cc:05:de:a1:ab:27:63:c2:ee:2d:
98:19:89:87:45:45:f9:26:92:e9:73:64:3b:aa:cc:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.145.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59560
Signature Algorithm: sha256WithRSAEncryption
a6:9a:3a:46:c1:41:43:6b:23:82:52:e8:82:77:04:50:67:4d:
d3:fd:d7:ce:86:85:a6:13:98:d2:33:59:19:7a:db:32:b8:22:
6d:54:5f:4b:92:21:8a:cf:0c:e0:87:c2:8e:81:fc:7b:4a:15:
72:27:35:ff:8e:d4:87:40:be:09:ba:32:6f:3b:78:a5:58:67:
6c:d0:ab:5f:c5:2a:ce:ed:8f:40:4a:01:d3:6a:6d:88:e1:73:
57:9b:e5:0c:d1:2e:e8:da:59:25:4f:3a:1d:ac:96:ee:52:da:
e4:fa:8c:1c:94:1f:eb:17:d7:57:23:4d:70:fd:e3:b8:9b:56:
d1:f4:91:4f:5c:96:8a:41:7c:a5:fb:38:73:7f:9c:82:1b:85:
87:e2:82:e2:54:68:82:f1:3b:c7:08:8c:a4:ac:16:87:47:50:
48:ef:75:20:2a:9c:53:b5:28:8a:4c:e3:7c:8d:ee:f0:0d:18:
f8:31:d7:5a:06:76:3b:86:21:72:d0:a6:72:9a:f9:2e:25:95:
98:44:8b:fd:c4:ad:61:da:a1:cb:23:ec:c8:5f:39:a6:a7:f0:
cc:be:f0:51:8b:3e:55:3a:ef:a7:1d:e1:2c:a8:3a:52:0e:18:
01:1b:ba:14:d6:81:fa:a3:da:bc:c0:58:95:8a:4f:22:a1:6d:
8d:32:28:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:52:33 2024 by rpki-client on console-ams.rpki-client.org