Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer (raw, json)
Hash identifier: jZ6RfDuMz2s4hBpqqSXQwzhuD6wqQ08g8ahtEgJIAyI=
Subject key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2B63F1FACA42C8E4F22232E1984F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12348
IP: 86.109.224.0/19
IP: 193.23.167.0/24
IP: 194.45.232.0/24
IP: 212.34.160.0/19
IP: 2a01:120::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2b:63:f1:fa:ca:42:c8:e4:f2:22:32:e1:98:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:e0:54:8d:87:7d:47:53:a3:ed:84:e7:d2:
9a:c0:e2:a7:3e:42:44:de:f7:a9:1c:03:94:e6:2f:
10:5d:80:9d:2f:c5:df:d8:4d:96:4b:31:44:96:d5:
8e:ea:fd:bf:2a:e2:0d:9d:bd:54:e1:c6:97:07:57:
3c:4f:cc:e9:3d:b3:18:3d:17:3d:4b:44:94:b6:cd:
88:2f:6e:9a:a2:a2:3b:11:a5:7e:36:97:1d:6d:fe:
9b:23:99:eb:de:34:26:e3:f3:04:1f:4e:bd:08:4c:
9e:17:cd:8f:10:54:c3:3c:7d:9a:79:6f:c1:6a:e1:
73:ea:7a:4a:7f:f0:5b:76:1b:32:e6:0e:11:c8:69:
49:73:01:c2:33:19:05:35:51:55:69:9d:d8:90:31:
f1:22:1b:9d:e6:4e:90:4a:59:07:66:f6:9c:28:68:
86:5e:7e:12:b8:be:5b:2d:c1:0e:1e:c7:96:a2:7c:
b1:fd:43:6a:00:8b:5e:84:ca:41:9c:56:f0:cb:ab:
1a:f4:40:81:97:3e:54:b3:63:9c:85:7d:db:d1:af:
eb:52:4c:71:2d:4b:3b:9e:5d:f9:c5:38:91:2e:a3:
52:65:ce:0d:34:92:8a:82:dd:23:68:2c:d6:44:ba:
a1:8e:3b:94:41:ab:3f:ec:c8:52:e6:7e:7c:21:1d:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.224.0/19
193.23.167.0/24
194.45.232.0/24
212.34.160.0/19
IPv6:
2a01:120::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12348
Signature Algorithm: sha256WithRSAEncryption
2e:d7:39:36:6d:b8:55:ac:97:32:ca:a4:be:e3:8c:b4:89:3a:
23:2f:4f:d9:00:54:ac:36:39:ce:81:00:47:e9:04:55:89:61:
dc:94:d1:f2:19:50:33:29:22:f6:15:96:df:82:4a:6f:8d:20:
a4:64:7a:67:28:d4:4f:d3:9b:b1:0e:43:68:be:eb:16:9b:d6:
9b:7b:37:a8:1d:71:02:33:8c:14:77:7d:ee:92:82:8f:01:c0:
73:85:73:56:28:92:11:d8:f1:ad:7e:55:cb:01:dd:33:14:8c:
37:d3:84:dc:6e:41:43:13:17:a8:22:ce:42:70:0a:6a:97:f4:
c5:09:3c:09:9f:e8:2c:c9:75:d6:d0:cd:4b:51:54:07:2c:01:
69:29:52:5e:8a:a2:45:10:fe:dd:ed:3f:c7:7b:2e:24:9b:0e:
ff:de:9d:01:9a:41:8f:eb:8a:85:0f:61:38:b1:24:bd:0e:8f:
f7:83:dc:27:04:fc:f0:81:d6:ff:ca:d2:5e:9a:8f:8b:43:14:
92:98:23:66:d1:24:1d:54:0d:00:5b:93:d5:38:05:5d:ee:f2:
9a:42:35:76:a2:38:f1:b8:ed:2a:d8:e0:87:2f:05:cb:87:6c:
0e:a1:70:3a:23:07:93:5b:3d:b4:eb:40:c4:81:c6:9d:46:1f:
05:57:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:06 2024 by rpki-client on console-ams.rpki-client.org