Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer (raw, json)
Hash identifier: 3hCE/tsClmakXsu+5Ube3dUZJLCjnbnOGzef+2geIXs=
Subject key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34914BA7CC71E8DF8126B4858F6E0A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208109
IP: 45.154.172.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:14:ba:7c:c7:1e:8d:f8:12:6b:48:58:f6:e0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:7e:41:78:a0:e0:0c:57:f1:b5:2d:ca:fd:
48:3c:02:26:88:64:f5:38:73:4d:83:a6:0c:ea:4f:
e9:aa:24:70:b5:2f:3e:89:d0:a8:41:91:6d:a3:6c:
4b:11:7c:7f:75:13:f9:38:6e:5b:4a:54:05:99:f0:
a0:b5:32:a2:87:14:68:14:b6:bd:8e:21:ef:64:1c:
f7:55:e7:5f:8d:c3:d5:ee:06:0e:db:09:48:80:98:
02:f4:c6:3a:d7:57:03:47:45:08:9b:b6:92:ba:4a:
c0:e0:57:f0:7d:7f:4b:87:45:e2:0e:be:b8:70:99:
c0:a5:b0:1d:b8:86:98:7e:68:98:1d:c6:28:fe:3a:
6c:0f:13:7f:0b:ac:e4:3a:30:b6:9e:23:2f:7b:e4:
31:83:6f:97:6b:67:43:eb:1c:a9:6f:9b:18:a9:bf:
26:cc:1b:5e:e5:c2:80:9f:94:3d:31:89:74:12:26:
16:08:6b:e7:b1:c2:3b:93:82:81:5e:47:68:6d:a0:
8b:bb:f4:c7:38:f0:f4:5e:df:c1:2f:9e:96:3a:fc:
5f:bf:6f:b3:ce:15:83:4e:75:c7:53:c0:ce:7b:c4:
9f:a5:d1:f4:70:d6:5a:d6:ff:1f:58:38:1e:19:71:
02:a8:be:8a:ce:8a:7d:3a:18:64:22:c8:b9:f3:76:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.172.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208109
Signature Algorithm: sha256WithRSAEncryption
49:8a:d6:ad:84:0d:90:b8:b2:33:a0:1e:69:67:f5:8c:02:ed:
f5:db:2d:f0:30:bb:52:0a:45:8b:76:4a:2d:a8:d0:66:ca:e6:
c9:e0:39:c3:53:97:37:af:4a:df:7a:d5:20:69:9b:83:1f:5d:
e1:25:96:64:5d:5a:1e:38:2e:24:65:17:d3:05:45:fa:c8:14:
49:d9:95:f2:97:3f:34:6f:d3:97:25:d7:88:c4:d1:b3:49:9a:
12:6b:10:1c:9b:80:cd:80:18:9c:52:cd:66:53:df:74:a1:42:
8c:d9:2c:f0:36:78:8b:40:7f:e4:ce:af:52:ef:35:a5:11:5c:
7e:da:90:c2:50:c9:79:64:03:27:16:a1:48:ea:ee:90:d8:28:
6a:51:67:e2:59:db:d5:e3:a0:ae:27:6f:2b:c5:6b:5c:8c:8f:
e3:80:1e:b2:24:28:a7:95:5a:cb:58:aa:8d:de:f5:52:c7:66:
13:cb:92:42:76:d5:7a:43:11:a1:96:a8:cf:9e:1a:d9:07:ca:
52:84:17:33:a3:b7:e7:7d:be:48:21:b3:30:70:ac:7d:3d:39:
ca:00:75:72:4e:5f:8c:6d:88:ea:8d:b6:1f:4a:01:d7:31:90:
ee:06:8f:5e:4a:92:c2:c0:8f:cc:bd:f6:f7:1e:b5:b5:0b:1e:
b7:c9:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:08:03 2024 by rpki-client on console-ams.rpki-client.org