Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
File: aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer (raw, json)
Hash identifier: xTuX/Eyy3+1ElQ0RTcfhThbU/09PNNh1MuiLQi1NK/w=
Subject key identifier: 68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34921FDC369BC0247CBA2363EEF204B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29275
IP: 195.137.196.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:21:fd:c3:69:bc:02:47:cb:a2:36:3e:ef:20:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=683b33dc7218b3fe883c49505134cb39a664fd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:32:42:d1:3f:7c:83:cb:85:a2:ad:c5:18:
5d:ac:4a:64:45:8c:d8:5e:24:c6:d5:b6:11:a6:1a:
3c:d8:0b:c7:10:b8:9e:49:2e:6c:6f:f2:17:39:7a:
67:bf:6b:31:b1:c2:03:51:26:01:03:b4:fa:66:5d:
a8:be:37:8d:c1:95:e4:64:10:86:da:46:35:24:46:
d4:4f:5c:ba:88:d8:9d:89:d8:c0:5f:c7:05:7d:f9:
e4:4a:72:03:a3:2e:3d:67:62:f9:db:2c:ec:20:38:
5f:ae:d2:9b:21:ab:dc:87:0b:6a:08:5c:d2:d6:38:
47:ac:aa:6a:c1:f4:ef:50:55:6e:d1:58:19:37:75:
25:3e:10:28:d1:dd:4f:ca:f7:f7:26:7e:5f:f7:64:
a4:a8:aa:12:06:31:e3:08:4c:63:82:90:45:6b:62:
b2:29:6f:c4:95:c4:49:aa:1e:d0:d3:ae:2a:91:3f:
f1:68:da:5c:cf:6c:4a:62:71:25:37:65:b8:ec:f0:
70:78:a2:e2:db:5b:42:4f:43:1b:7c:10:5d:b4:11:
46:91:74:50:40:8f:96:b3:33:2e:3f:c0:ac:93:55:
51:d9:3c:5d:3d:c9:88:3b:91:36:4b:76:1c:05:9e:
e6:f5:4a:9c:f2:c3:9c:21:8a:19:61:83:d1:b8:7c:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.196.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29275
Signature Algorithm: sha256WithRSAEncryption
af:7d:46:a1:69:70:18:d4:4d:19:9e:c4:17:41:4b:2b:87:82:
46:98:b9:46:ab:c2:42:97:55:a9:90:9f:cf:0f:5d:28:94:3d:
50:eb:cd:c4:b9:24:ad:8b:e0:fe:7e:61:af:2c:c8:06:a7:13:
0a:0b:cd:bf:51:68:15:74:57:56:28:cc:09:46:77:84:35:41:
62:cf:2d:bd:5b:43:66:47:47:91:be:17:10:06:e5:33:18:23:
d8:c1:cc:6f:49:8a:9d:f4:71:3e:e0:f5:65:bc:2d:d9:12:04:
ae:94:89:5f:27:cc:18:7d:7f:12:77:ea:fe:dd:cf:ef:56:35:
a1:1f:b1:b7:97:a1:2b:82:16:1d:19:07:35:63:15:94:28:b8:
6d:99:6a:7f:74:94:eb:ad:74:cc:15:9f:d7:3f:81:67:58:e2:
a7:53:d8:0e:30:ce:04:81:d2:68:70:86:6f:24:c5:9d:8d:b1:
02:86:24:bf:95:88:96:74:98:78:5d:90:f9:c6:b7:a7:a8:0b:
ac:40:f5:7a:88:06:5c:af:14:89:8e:67:ef:a2:49:fa:fd:e9:
3f:b2:d9:bd:4a:de:b9:ba:25:e0:2a:bd:76:7b:06:35:72:d7:
a6:6b:f2:66:91:98:0d:08:73:f1:db:2f:99:4b:4e:ce:8b:2b:
9f:e4:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:52:04 2024 by rpki-client on console-ams.rpki-client.org