Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer (raw, json)
Hash identifier: MOaD2O6O5U+Is/PfekQvC4yYoUU6/GanmV2MduNdlOc=
Subject key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801C2A998A1000056A52C691E41DEB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207091
IP: 185.164.40.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c2:a9:98:a1:00:00:56:a5:2c:69:1e:41:de:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:9f:83:a1:eb:bb:06:2b:a3:a9:47:fc:4a:
2b:9f:d5:16:3a:11:eb:3c:ca:11:71:b1:21:7b:e2:
f3:22:b9:1c:b0:f5:58:45:0e:c4:e8:d8:21:41:be:
4d:49:a7:d9:b6:18:f8:11:4e:82:8e:f3:b8:a2:84:
a4:6e:ba:b2:e3:ac:c2:02:3f:05:4f:71:3e:17:51:
91:90:0c:5c:c7:6e:6c:e1:92:b7:4e:2d:31:b1:33:
46:3c:17:f8:3c:80:22:3d:a9:f8:db:97:21:c3:98:
f0:f7:f0:88:4e:1e:b6:9c:e8:b1:c3:d3:4c:35:4f:
7a:01:3b:90:1b:e2:54:fe:ab:af:16:4e:52:e1:52:
1f:39:ec:e5:87:21:a2:23:a5:82:85:77:ee:71:69:
08:eb:06:b8:d0:67:ff:4c:03:b2:5a:ae:5b:9f:b7:
19:b6:45:bd:0c:dc:d5:27:e8:8e:e5:ee:b6:56:76:
98:f4:a9:93:ba:dc:e4:fd:4d:c4:69:78:54:75:10:
6b:5b:23:01:04:5a:cb:7d:df:3e:94:14:3e:ec:1b:
c4:62:ac:20:9e:49:13:58:46:a1:66:eb:f0:5c:f8:
81:68:ff:be:17:af:29:42:94:50:13:b6:31:9d:9c:
39:0a:46:ec:1d:35:df:45:44:50:71:1f:49:ff:bc:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.40.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207091
Signature Algorithm: sha256WithRSAEncryption
91:41:cb:37:47:be:01:85:ad:83:ba:17:fb:22:d4:d2:38:a3:
fc:4f:e0:f6:21:c4:8a:8f:6a:75:2e:00:86:fd:88:96:33:46:
8c:1d:a3:34:24:ec:8d:86:1d:36:b8:a2:94:1b:b0:31:f4:f4:
19:32:fd:b6:8c:be:23:22:5f:bc:1f:21:49:63:99:85:d3:32:
11:1a:39:f5:f0:34:fa:28:eb:81:c8:bf:4b:26:83:0d:2e:fd:
64:3c:b8:ea:4a:17:29:66:ff:d4:a4:ee:85:c5:95:50:e3:57:
c7:f3:9a:5b:c4:36:80:da:5c:94:e0:ba:43:82:cf:2d:ec:3b:
0f:40:25:40:e4:a3:c7:ba:33:7a:9d:29:49:4e:ed:58:27:de:
98:84:ce:1c:7f:9d:ca:10:76:88:f9:56:f2:b0:f0:ab:d8:70:
49:cd:51:fa:30:f1:0d:84:bd:2b:35:af:d4:5e:51:90:56:89:
ee:a4:8e:51:91:50:7c:a2:42:b8:d4:76:4c:e8:f1:d6:9d:f7:
e7:a7:26:d9:96:25:b4:50:a0:8a:dc:fb:d8:a9:0e:be:a8:fd:
8c:de:76:f2:7a:14:a1:d6:da:68:63:c4:9d:24:90:f2:8e:5f:
db:6e:4d:21:5c:5d:9a:8f:e1:74:62:30:b9:18:cc:35:8e:aa:
bd:ad:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:30:26 2024 by rpki-client on console-ams.rpki-client.org