Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
File: fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer (raw, json)
Hash identifier: zLVXYxpFDLj8jA4WgldgAHk580NIYFFvovI6EXwhyEs=
Subject key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC871491C6E38AA320759DC3EC1464A38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31293
AS: 203954
IP: 185.118.240.0/22
IP: 194.150.116.0/22
IP: 2a06:9680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:49:1c:6e:38:aa:32:07:59:dc:3e:c1:46:4a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:9c:37:30:ad:e9:5c:1c:cb:ba:20:ae:25:
b9:17:ff:d6:a3:c4:a6:5a:f9:53:37:ce:4c:61:ca:
79:a6:ec:30:a3:b6:3c:56:aa:40:c9:df:5b:27:6f:
7c:88:3e:f4:b1:5c:b4:c4:59:7e:7b:6b:cc:4d:46:
48:9e:4c:b9:ca:0b:dc:42:4f:f4:0a:95:f9:66:d7:
39:9b:5e:3f:d4:f6:33:30:7c:1b:ae:de:ea:05:8f:
37:a2:3d:92:46:6a:ce:85:4a:0d:33:df:15:85:ca:
1f:5f:a1:8a:6d:8c:48:55:39:02:f3:88:de:18:e4:
0f:27:46:21:b0:78:21:84:40:08:fa:eb:cc:cc:56:
95:b1:61:cd:e5:d3:bc:41:8c:c1:21:5c:ec:1b:53:
eb:4a:32:4c:90:14:da:f2:fb:9f:92:75:5c:dd:8f:
5e:4c:e1:b2:d2:6a:33:05:12:be:ae:0e:86:9e:78:
b7:5c:94:5c:0a:dc:39:e3:89:f8:4a:35:72:d7:95:
67:6f:ee:07:9e:d7:a2:e8:84:a9:5d:1e:1a:de:26:
26:e9:fb:01:ff:53:60:67:3f:14:83:b0:04:5f:69:
be:c1:3b:50:48:9a:39:6e:58:03:29:78:f4:e6:c9:
3b:53:7a:62:26:ef:e2:c8:e4:00:f0:18:c2:4b:c1:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.240.0/22
194.150.116.0/22
IPv6:
2a06:9680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31293
203954
Signature Algorithm: sha256WithRSAEncryption
6b:31:ee:84:e2:71:d5:54:85:18:e4:fd:0e:74:4c:d6:ce:ce:
8d:9b:fc:02:b9:ea:a0:61:99:93:e4:5b:24:58:9a:7b:50:79:
b1:74:31:3d:0f:61:59:2d:60:41:fe:6d:32:9e:f4:46:2b:38:
c7:50:ca:10:bd:0b:d2:e2:ee:87:cd:06:57:cd:fa:7b:3b:4b:
c6:25:96:14:41:1f:a2:36:f2:86:3c:e9:ad:f3:d5:1c:96:a4:
20:64:df:bc:7e:f8:9a:48:7d:2b:87:33:18:23:50:58:58:43:
18:27:65:9e:da:fb:e4:6a:50:92:f9:a5:04:96:63:1d:06:e4:
71:c7:4d:8f:84:28:ae:95:03:91:a3:73:a9:3f:17:91:12:d0:
8b:b9:f9:f9:6b:49:04:68:02:06:98:c3:7e:80:66:be:83:ba:
90:44:7e:36:ff:88:5d:64:b3:c4:96:e8:aa:ff:c5:df:4d:69:
89:81:ec:2f:bf:09:37:80:11:ea:6e:9c:ca:2c:0a:3e:a9:a1:
40:d5:d5:0a:31:b3:a8:07:94:98:b8:e9:e8:64:0a:da:af:30:
54:f1:1b:ad:73:da:9a:88:a8:7e:31:1b:15:4a:31:03:67:46:
16:a4:97:52:18:9d:5e:90:aa:05:b3:ce:16:c6:53:7d:fb:94:
67:d3:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:07:42 2024 by rpki-client on console-ams.rpki-client.org