Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
File: ag9YMNvEu6u2gnd-vThD11BInsg.cer (raw, json)
Hash identifier: v+EFdhvF1KDDLt/SgvWdLkMF/asU5Cv6PzLQA1I+BzE=
Subject key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5925B1E45C2A99274B203FCC593ABC97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jan 2024 06:54:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.145.122.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:25:b1:e4:5c:2a:99:27:4b:20:3f:cc:59:3a:bc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 06:54:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:8b:1b:0c:dd:50:dc:a5:f9:47:17:e6:38:
d0:94:24:c9:d4:41:8b:24:73:64:c3:0d:b7:3b:e4:
25:bb:4c:76:bf:cb:cf:6a:bf:3f:60:11:14:75:35:
84:4a:b4:a7:43:8e:11:c5:9c:3d:10:b2:a8:6a:88:
03:7a:25:d9:cb:42:40:ca:58:6b:56:37:3f:0b:bb:
5d:f4:af:fc:98:63:67:3b:75:06:54:38:cc:3b:45:
03:1e:4b:ff:81:12:3f:c7:92:ac:98:8c:be:0b:19:
c7:a9:5c:5d:c4:fc:7f:73:85:02:8c:de:be:d4:22:
c0:59:8f:cb:bc:4f:66:80:97:1b:bb:47:3c:7f:eb:
23:3f:ff:bd:1f:18:e6:41:57:66:59:b8:cd:ff:a5:
0f:e0:69:5e:09:8c:2d:0c:18:a2:be:ee:dd:62:d5:
90:33:0a:c0:b7:67:f5:c8:66:07:53:5c:c8:6f:82:
8a:69:73:aa:32:c8:cb:6b:27:2b:e5:85:b3:8a:62:
bd:23:9a:34:85:26:41:3b:c9:58:08:6d:a2:3a:91:
3e:10:80:f6:82:73:04:dd:56:2c:fc:a8:69:54:81:
04:e7:c6:88:83:ac:d3:5a:41:0d:00:ce:aa:ab:2b:
c7:e6:a1:45:fc:e1:b0:79:db:fe:2f:97:86:51:32:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.122.0/23
Signature Algorithm: sha256WithRSAEncryption
50:f0:62:aa:c2:47:9a:9a:0e:97:dc:40:c1:45:c7:c4:ca:d0:
f7:51:e7:bd:53:48:3a:9b:ea:d5:30:27:e3:fc:4f:83:5e:8e:
b1:e6:96:d4:ca:94:8f:59:7f:ab:5e:e7:db:2a:38:98:5d:e8:
3f:86:e0:69:34:cb:a9:57:ea:d7:85:71:54:79:dc:b5:e3:aa:
96:f9:98:6e:5b:e0:af:d2:4d:80:75:1d:30:66:10:a2:02:c9:
37:b1:d7:26:6b:7a:e5:cd:e1:d3:0d:48:a9:54:4c:a6:be:51:
69:ba:1c:bb:96:99:80:1a:98:52:5d:1a:46:f9:76:14:c0:c5:
60:88:35:6d:c8:ba:42:9c:f8:ab:1a:c4:90:ce:89:d3:17:3e:
48:33:df:7c:c2:f8:85:a4:b5:4c:7a:04:2a:f6:4c:32:e1:50:
5e:f4:ec:f3:b9:2a:0c:43:b1:29:13:8e:ff:47:fa:da:e5:5a:
21:4f:5d:2d:52:be:4b:a0:07:89:52:01:b8:cb:54:50:05:11:
45:3a:40:68:ee:83:f0:92:f2:c7:bb:34:ce:39:89:21:93:0a:
15:fd:89:5d:9a:09:3d:0d:98:29:d0:92:ac:8d:c3:0d:9a:d4:
76:cb:5a:58:eb:bc:d8:8f:8c:ef:2a:6b:5c:4c:a7:5d:9d:b6:
12:6a:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 09:35:23 2024 by rpki-client on console-ams.rpki-client.org