Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.cer
File: a2VUSgt2kuQAmWmjdRfA6z5JAfQ.cer (raw, json)
Hash identifier: oua3GYjhLXx6VQSIqT2+Q3brXPUX9bqRNdAeUo60Ypc=
Subject key identifier: 6B:65:54:4A:0B:76:92:E4:00:99:69:A3:75:17:C0:EB:3E:49:01:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ED34DA5CB7D4B668CD559F0E49593
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47112
IP: 193.30.143.0/24
IP: 194.50.102.0/24
IP: 195.242.160.0/24
IP: 2001:67c:2474::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d3:4d:a5:cb:7d:4b:66:8c:d5:59:f0:e4:95:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b65544a0b7692e4009969a37517c0eb3e4901f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:eb:c0:d0:80:5b:f3:7d:e2:fe:32:b4:3f:
d9:a0:15:1d:cf:d2:9b:76:74:c9:8e:d8:46:02:13:
86:c0:37:d0:1f:84:52:0e:6a:b2:e1:e5:60:46:46:
5b:5d:1c:d8:d9:ac:df:41:0b:29:25:bb:a4:19:19:
9c:91:7a:8d:a2:20:18:b4:20:7b:3b:8f:1a:9e:d5:
04:69:50:e9:2f:81:b9:d5:96:6d:f8:63:90:19:ba:
ad:58:56:a7:c6:94:63:8a:57:f6:9d:a5:db:65:24:
37:f6:e1:f3:b5:9c:07:4e:3e:dd:29:92:58:85:c8:
8f:aa:7a:7f:68:a6:38:4f:02:56:bc:d0:0e:73:e5:
98:b6:86:4a:9f:08:05:3a:87:c3:c6:c2:0d:55:19:
2b:6e:08:57:be:c1:dc:50:b6:13:ef:b4:f4:41:54:
21:95:d2:af:20:90:c3:5c:5a:b8:18:23:74:0a:2c:
43:7b:98:64:e1:5a:39:a1:ba:72:c2:4b:17:a2:b9:
72:35:a5:e0:50:a1:15:50:64:20:e8:71:a5:d2:e8:
06:ea:3b:81:d6:16:8d:00:93:89:4c:de:34:55:35:
f8:0b:5b:6c:5d:c5:b6:ad:90:62:67:ab:b1:8a:b6:
86:bf:42:32:cb:7a:62:f3:fb:5f:f0:3a:1c:53:af:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:54:4A:0B:76:92:E4:00:99:69:A3:75:17:C0:EB:3E:49:01:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.143.0/24
194.50.102.0/24
195.242.160.0/24
IPv6:
2001:67c:2474::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47112
Signature Algorithm: sha256WithRSAEncryption
08:fc:69:99:5a:e9:eb:66:c7:59:34:70:01:9c:7f:2f:a9:ba:
c6:6b:91:00:eb:cf:5a:42:df:2f:12:9e:03:81:78:50:71:76:
a6:e7:17:5d:9c:6c:58:ce:37:f9:82:e7:e7:0d:f9:3f:3f:c6:
f3:b0:45:18:1e:6a:09:5c:00:c5:64:9d:e0:7e:1f:83:84:ee:
21:07:52:2b:19:aa:47:4e:0e:89:35:73:ce:83:fd:f5:99:29:
50:86:b8:29:b0:b6:ea:f1:ea:ff:32:40:f8:c8:4d:ae:b8:39:
72:96:02:de:af:ae:fd:2f:70:8d:64:7f:1b:2a:34:b5:92:d8:
2a:c7:aa:c5:e9:c3:83:b7:35:52:c5:c1:86:6d:d2:de:b0:d4:
c7:55:d0:87:6c:56:36:79:cf:ad:01:29:53:a5:ec:d0:8c:e0:
43:a2:54:54:83:61:b6:5e:1d:36:19:37:09:50:7f:24:5c:b4:
de:21:48:ab:62:63:73:ca:2d:cf:33:fc:9b:e5:a5:b5:dd:e2:
58:ac:0e:dc:93:14:40:88:4a:67:af:f7:23:d1:31:66:a7:d1:
45:b2:81:ef:95:68:dc:49:c2:8f:ba:db:82:de:7d:a8:57:18:
58:a8:e0:86:f5:5d:3d:2c:9e:90:f7:10:2c:f9:df:16:03:c6:
6c:65:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:24 2024 by rpki-client on console-fra.rpki-client.org