Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
File: fGlngv8SGuWm2dXPo4R5dotr8L0.cer (raw, json)
Hash identifier: 4eKH5i9uyYYYIGhl/EhCqSgzuAdKpHS0teJz49M7XEE=
Subject key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801BC4212D6DF92562D21C559C1D35D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20720
IP: 85.233.80.0/20
IP: 109.73.192.0/20
IP: 217.198.0.0/20
IP: 2a11:700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:bc:42:12:d6:df:92:56:2d:21:c5:59:c1:d3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:41:df:47:04:c2:56:21:12:29:cc:48:cb:
3b:bb:1c:a2:18:10:1a:1e:13:fa:44:c6:1a:91:91:
b4:10:5a:d5:23:49:0d:55:d8:b6:72:e5:48:c5:c8:
8e:2b:9b:fd:0e:40:05:09:11:cf:06:97:4e:41:73:
f6:9d:c5:8d:6d:17:9a:81:02:46:d0:82:d5:1c:74:
92:30:32:a3:df:be:33:d2:25:8e:33:3b:fe:ed:a6:
1e:76:24:b2:0f:57:be:64:92:0b:53:50:6e:b5:14:
80:c2:19:ac:e5:ef:a5:99:fe:20:84:6d:e6:09:ea:
9b:f2:e0:88:4c:c0:a7:7d:f0:6b:38:92:68:0d:ba:
1f:07:dc:49:62:93:27:3d:45:8f:73:58:11:94:d1:
52:4a:e5:42:4d:f4:cc:8c:c9:82:06:13:ad:fc:47:
c4:f2:1c:6c:9a:dd:d9:11:8c:09:40:3b:32:dd:df:
34:b9:30:ac:2e:b6:2c:f5:2a:04:19:a6:1b:b0:6f:
b1:68:fb:42:35:a0:37:eb:dd:3f:10:30:45:a2:8e:
91:14:8b:6b:b7:c2:48:5b:a0:7a:14:0d:ce:00:fa:
4c:c5:05:0b:18:ce:38:5e:ff:98:3e:4c:e7:19:13:
dc:d9:c4:99:92:32:f6:f8:81:48:44:ec:78:35:fb:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.233.80.0/20
109.73.192.0/20
217.198.0.0/20
IPv6:
2a11:700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20720
Signature Algorithm: sha256WithRSAEncryption
42:c5:b1:fb:8e:bc:58:7e:86:af:f7:9d:89:e7:20:87:77:ec:
ba:58:0a:11:49:48:c0:7b:67:54:29:f0:0f:b4:fe:60:3b:ae:
0b:f8:e6:fd:39:89:37:41:83:b8:0e:04:ea:60:91:d0:3c:c7:
cb:27:b7:02:a0:08:c4:0b:9b:8e:6a:58:95:f0:01:c1:0b:c7:
f4:59:58:64:92:43:83:ec:0b:5f:e7:f5:89:6c:03:bb:5c:ab:
72:2e:cc:2b:a2:a2:ea:a3:fa:f3:ce:f1:93:10:3d:d1:07:54:
c1:e0:ef:3c:9a:a8:d7:21:c9:19:e5:5d:b3:b9:54:3e:a6:9f:
d1:b9:b0:63:1e:73:46:a2:6a:05:39:27:77:e4:db:a4:83:0d:
67:b7:37:f9:89:9c:5e:b3:81:be:85:58:c2:3f:dd:1f:df:f3:
54:b3:be:95:22:c9:f9:23:97:00:4e:e8:fa:39:f3:01:2e:3e:
f1:59:4e:68:f6:5c:a6:0f:a8:ed:69:0a:23:bf:5a:93:43:4e:
26:4b:c6:4a:fd:75:38:5a:dc:c4:80:f6:56:7a:3b:80:66:84:
ab:7b:ab:c3:04:4a:37:a4:49:2e:bc:bb:c3:9a:b7:f4:cc:d1:
02:2d:ed:dd:1f:03:b9:d3:e6:1f:8f:09:5f:fb:2f:92:2f:19:
0d:6f:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:32:47 2024 by rpki-client on console-fra.rpki-client.org