Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer (raw, json)
Hash identifier: jo3xLndblWqk50PQLfWQw3/384BcTFFawf7b2WoC4hM=
Subject key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB1A9E03D6BC1D75AA481E52A0C427
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 38948
IP: 80.251.80.0/20
IP: 2a0b:8140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1a:9e:03:d6:bc:1d:75:aa:48:1e:52:a0:c4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:ef:63:de:d5:be:d5:f1:c6:7b:b6:28:e8:
8c:a8:ec:38:e0:af:a9:71:7e:a1:24:4a:ba:25:4a:
37:67:32:27:d3:af:b2:4e:aa:c0:21:57:7c:4d:01:
74:67:01:9b:4c:6e:c3:74:38:98:e9:87:79:d8:eb:
d1:27:cd:af:67:bc:32:49:b7:87:bc:49:4f:5d:e7:
2e:fd:d5:44:12:67:4e:32:5d:b8:d2:7f:8e:33:0f:
f5:ef:94:28:d0:62:21:d4:2b:63:3f:73:7e:e7:60:
ae:ac:28:3e:fe:16:3d:d9:2c:00:65:9f:e8:8f:0e:
d9:b8:a3:fa:ff:ee:ec:67:19:3e:8e:12:15:81:3f:
12:ff:63:9c:bf:e9:ef:26:17:ef:bb:a2:50:ba:0b:
75:f3:c3:a4:ac:45:a3:0b:32:5c:10:4c:10:e3:6d:
b9:75:03:09:87:38:f2:59:79:00:e8:59:8a:bd:21:
a2:22:24:ae:f2:5f:bb:d4:fa:5b:58:45:a9:2e:0e:
5c:e4:24:f6:33:15:69:dd:de:1c:61:90:11:56:0c:
a7:57:c9:96:35:45:63:3c:54:bb:e9:b2:f9:a5:36:
01:a2:94:b3:64:5a:1f:70:0b:9e:51:cb:11:eb:41:
6b:05:69:ab:ba:e1:7b:89:c9:81:a9:58:6a:24:33:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.251.80.0/20
IPv6:
2a0b:8140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38948
Signature Algorithm: sha256WithRSAEncryption
8b:c3:53:1b:d7:04:40:8c:fe:dd:2e:9c:57:35:f9:55:27:b0:
c9:a8:68:ee:46:65:f6:4e:86:1e:99:e4:ab:1e:32:30:9a:65:
60:57:76:27:25:76:5f:f7:5a:93:a1:ef:fe:cc:e8:17:8a:f9:
91:a2:25:62:f7:48:0e:94:b2:db:18:a8:ea:29:cb:97:71:67:
2e:e3:f8:5d:1f:9c:3c:37:f7:30:5a:22:84:b3:4f:49:29:50:
df:48:98:7c:d8:b7:fb:f4:1e:a8:85:fb:d5:16:78:67:2f:d9:
9c:12:bb:36:05:73:9a:2b:60:49:61:40:53:97:2d:29:aa:d8:
7f:c1:d5:a4:3c:23:33:4d:03:d6:96:f9:ba:b2:ad:0b:3d:69:
ff:2d:c2:47:2e:cf:79:cc:4a:aa:08:7e:ca:56:26:cb:4c:16:
c1:9b:12:44:0f:41:52:6f:6b:81:be:0d:8f:bd:91:6a:90:fa:
c1:f1:29:12:56:8a:51:c1:55:0a:f6:5a:76:a5:56:f7:98:a9:
57:98:af:dc:8e:16:6a:4a:09:3d:33:9a:57:f3:fd:37:42:b9:
a6:88:31:7c:8b:b0:49:4d:e6:63:2c:13:52:b2:0d:fe:a5:fc:
77:65:cc:00:f2:91:e9:bb:5d:4d:aa:de:11:9c:14:36:69:59:
7f:c2:d2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:58:00 2024 by rpki-client on console-fra.rpki-client.org