Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
File: aZuxClVyF1sDo8fL--k4t7FEGsA.cer (raw, json)
Hash identifier: pKwacysgM/9BddS2OXpAJJLuuydGf1i5eHnaNe/f5f0=
Subject key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AF66FCCA0A3201A9C4C62AD3C3A0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61024
AS: 209199
IP: 185.124.160.0/22
IP: 2a06:b380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f6:6f:cc:a0:a3:20:1a:9c:4c:62:ad:3c:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:e7:c7:37:f4:0c:2d:f7:4c:81:ae:22:58:
58:32:11:89:10:ee:76:c2:e7:8d:f6:7c:a9:4c:4d:
e5:84:c3:bb:83:73:26:80:78:87:60:74:52:1e:84:
ad:97:9e:6c:1d:dd:37:92:69:c8:28:a5:b6:a3:22:
c9:15:ba:ea:cc:f6:ee:32:ae:f2:1a:64:1a:b7:25:
f0:17:8f:13:62:33:21:1a:79:e7:31:fb:89:82:68:
8e:f4:64:34:38:ec:99:eb:3d:d0:37:d2:e2:58:c0:
84:95:a6:d7:57:4d:c2:3a:13:c0:88:9b:61:67:c5:
d8:2a:4f:83:3c:60:45:86:2a:32:9f:96:c8:75:22:
92:cc:fa:d5:be:59:3f:c9:0f:c2:4f:26:6b:1e:87:
cd:76:b9:d6:9b:09:5d:89:96:1a:7e:fb:b3:b9:ff:
dc:8d:0e:e9:10:65:ef:d0:1a:1f:96:96:f3:f7:4c:
93:9b:ca:a1:0e:f3:c8:56:fc:16:b2:5d:08:cc:63:
d3:95:cc:8c:66:c3:75:e1:cf:a9:da:0b:f2:7f:9f:
a2:bf:4c:98:f4:a6:5e:aa:eb:2f:3c:3c:03:70:23:
99:e5:82:b3:c1:57:85:8c:a8:f1:5b:e7:dd:ff:cb:
0d:17:14:f1:bf:88:17:d3:3e:c0:ee:8a:86:98:0a:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.160.0/22
IPv6:
2a06:b380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61024
209199
Signature Algorithm: sha256WithRSAEncryption
6b:39:4d:15:b6:17:49:4d:67:5f:24:36:e1:21:8b:93:48:8f:
b5:ff:d8:dd:4f:99:99:4d:92:be:6d:3d:4b:5e:91:58:c8:00:
49:49:19:8f:db:f9:56:2f:8a:6d:76:0e:44:af:f8:c4:a1:89:
1b:30:7e:b2:63:2e:ff:d6:5c:e6:58:17:2e:b0:7b:cd:18:59:
33:7f:16:ac:bb:71:e3:6f:9f:20:c6:93:34:04:ab:bd:8d:91:
ad:e5:05:fb:b1:09:55:23:2e:1c:58:c6:97:96:35:38:d6:87:
60:cb:c8:51:b4:9a:5b:72:8e:bc:39:30:27:38:b9:6f:62:d7:
36:1b:2c:0e:a7:84:c2:0b:5e:07:7c:a0:f6:77:9d:87:63:84:
35:e2:05:38:80:29:a5:4a:ca:6e:88:ad:79:98:26:8b:83:ef:
49:65:6d:60:de:05:2f:56:11:c5:09:8b:e5:e2:bc:51:e5:cc:
73:43:e2:00:b2:c6:63:65:0d:a5:e6:0c:35:d8:c9:29:3c:fb:
12:d7:4a:8d:92:8f:d3:bc:69:ac:29:95:9e:a9:fd:e8:2d:30:
30:87:9c:8b:0e:7a:44:30:0b:b0:eb:10:bb:73:44:b6:de:22:
99:a9:2f:44:77:c8:60:fe:6c:d9:24:4f:80:62:6f:ca:ce:ab:
d0:a4:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:04 2024 by rpki-client on console-fra.rpki-client.org