Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.cer (raw, json)
Hash identifier: dj649C44De0fM80yK3TeVmMv4l/f9dH8Ns9MTTGnnuk=
Subject key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC7B5776AFDE52FC28E1956BADA702
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212574
IP: 185.153.232.0/24
IP: 2a10:7240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7b:57:76:af:de:52:fc:28:e1:95:6b:ad:a7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:0a:7e:79:60:3b:d0:10:85:95:75:0f:26:
10:a7:1f:24:1e:7d:d6:32:f6:8a:e2:c6:21:5c:e1:
bc:51:07:5b:79:02:ad:d6:f9:dd:5c:bc:c8:47:f0:
c7:17:b8:b9:71:4f:94:a8:3e:fc:91:02:3d:ce:35:
c8:3a:71:32:49:d7:29:4c:d8:ce:9f:f8:a0:c9:af:
11:89:57:42:7c:55:36:c2:aa:6f:85:4a:ad:a8:91:
00:9a:5c:76:9e:45:33:69:cb:92:7e:8e:ff:56:85:
46:d1:ad:0f:86:c6:3c:74:cf:e8:99:4b:ff:1a:a5:
b3:bd:8a:5f:bc:1b:d5:fc:67:46:00:85:ee:cc:9f:
5f:f7:04:ca:4a:8c:81:2c:2e:28:ba:d3:77:68:72:
34:6e:bd:00:dc:40:23:cf:18:a1:88:0c:63:95:bd:
07:4f:80:e3:21:e2:9d:5c:f1:a6:52:ea:bd:d7:48:
33:1c:88:6e:3b:67:3d:4a:df:f4:5b:8b:65:61:2c:
63:ea:62:20:ea:a1:52:87:8d:48:3e:58:4c:b2:a9:
87:2f:71:8b:db:d9:cf:55:72:9d:fb:20:b4:1a:ad:
82:16:ad:06:03:95:44:01:b5:aa:f6:69:bd:b0:69:
0e:3f:6c:23:13:d3:8b:b0:ff:bd:47:20:d9:25:ee:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.232.0/24
IPv6:
2a10:7240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212574
Signature Algorithm: sha256WithRSAEncryption
37:9b:10:ed:fc:7c:d3:15:05:5a:95:36:cd:eb:56:95:f9:c2:
53:31:b6:5c:09:68:0b:8c:48:1f:88:19:95:50:a2:ef:20:60:
44:af:51:ed:76:89:bb:c4:86:db:19:80:0d:b3:03:d6:86:58:
96:ed:f6:47:46:48:ee:74:59:12:7d:be:77:ac:f3:4f:32:86:
48:91:b3:90:1b:80:49:c3:79:5b:32:46:08:b5:3c:fc:2b:b0:
56:c7:92:42:93:ef:89:a3:90:aa:c6:ed:57:17:04:27:5d:98:
2c:05:e2:da:ff:cb:08:aa:90:d5:71:0f:d1:ef:32:a7:d5:6b:
c8:50:36:56:7b:37:a8:09:40:64:36:de:7d:ac:18:57:df:f1:
a2:af:f2:d4:36:45:92:74:04:2e:a4:27:bb:55:53:dd:c9:96:
81:84:53:16:12:ae:dc:f5:8d:af:93:f3:9e:f0:5f:23:66:85:
b1:62:1f:ce:a8:d4:c2:a0:db:ee:cf:a6:37:87:b1:84:05:87:
0c:62:9e:27:d3:cf:a6:18:7f:3a:c1:73:b4:4c:14:ef:96:a9:
06:98:07:8e:c8:74:dc:b2:2c:07:a5:e1:22:4f:ba:35:93:9e:
a3:49:e7:63:2a:7d:47:71:54:ca:79:d4:00:91:5e:3f:27:17:
59:72:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:41:22 2024 by rpki-client on console-ams.rpki-client.org