Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
File: g-k154ofll0QiRUhXQ8Et2tzPlg.cer (raw, json)
Hash identifier: 5IZSJOAV4uidzQeb6YfknMIsYNYKF2nqmNCHuyoihso=
Subject key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793373497C7FB70684EEFACB827348B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198066
IP: 91.146.96.0/21
IP: 185.47.244.0/22
IP: 185.50.44.0/22
IP: 185.186.168.0/22
IP: 185.187.224.0/22
IP: 195.192.255.0/24
IP: 217.61.208.0/21
IP: 2a01:71c0::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:37:34:97:c7:fb:70:68:4e:ef:ac:b8:27:34:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83e935e78a1f965d108915215d0f04b76b733e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:0b:63:05:6e:9e:65:7d:ce:d7:e1:d7:8f:
39:df:84:86:2b:aa:b9:4c:07:4d:1f:be:90:eb:28:
94:c0:4a:e3:6a:4d:4c:5b:62:bf:0c:8b:5e:d9:4f:
42:e0:a0:e9:fd:c5:cf:d7:3f:ef:a2:50:db:22:57:
33:47:12:df:a7:2a:a5:69:90:3b:6c:30:58:62:fb:
29:a9:b1:92:fd:fb:fc:e6:10:04:ca:02:94:c8:ef:
c6:fe:03:6a:fd:4f:df:3f:cc:dd:95:1c:65:7e:b8:
a8:01:05:e3:c6:e0:88:ec:a0:f1:ba:96:32:1b:7e:
3c:34:30:be:9d:9a:41:99:29:7e:58:58:62:56:38:
1d:c1:05:47:10:c1:92:e4:f0:1c:09:86:44:53:33:
79:be:9c:38:55:38:c8:ce:7e:05:62:c1:4c:6a:a3:
10:94:94:14:e9:b7:77:62:21:e3:e4:fd:8a:1d:a4:
9c:2d:9d:a6:20:aa:fb:27:7f:1a:f5:eb:88:da:7b:
8e:21:54:c4:b5:e2:03:d4:32:6d:98:7b:ad:0f:f8:
23:19:b8:6e:a7:82:31:2c:42:6d:d0:50:e6:a2:99:
e6:67:20:8d:45:5e:bc:a1:4e:d3:9c:29:45:db:a9:
f8:b7:65:ac:3e:83:62:28:37:fa:69:bd:5a:83:79:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.96.0/21
185.47.244.0/22
185.50.44.0/22
185.186.168.0/22
185.187.224.0/22
195.192.255.0/24
217.61.208.0/21
IPv6:
2a01:71c0::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198066
Signature Algorithm: sha256WithRSAEncryption
7f:ef:e3:24:9f:cb:00:48:36:31:b3:23:51:74:bd:63:22:2c:
9a:aa:46:78:66:6b:80:b8:4b:93:68:18:30:1b:d5:c3:a0:4f:
98:e8:4e:3b:ff:f2:01:be:4d:99:b4:8d:7a:13:f6:f6:2a:31:
75:3c:fb:21:f4:77:84:52:0d:d0:80:4d:90:90:03:6b:a7:64:
7c:f1:70:95:4d:59:e0:b0:b4:96:5a:b1:80:3f:b5:8d:c1:e9:
18:2e:64:97:ae:91:6c:96:4a:6a:2b:49:54:cd:47:55:ad:ec:
7d:65:5b:e6:c0:00:f0:4f:c0:ce:29:5a:64:67:f8:4a:7e:72:
79:f4:5c:21:e8:15:77:7e:84:32:ae:2b:0c:e1:6f:1a:eb:64:
6f:f0:23:c2:9f:bd:0e:d7:e9:b8:88:44:51:88:07:50:d6:40:
52:88:4a:36:4d:f0:30:41:31:61:98:e5:c7:3d:a1:c3:1f:93:
b3:dd:66:db:81:4e:cc:87:47:5c:35:97:44:70:06:4e:4c:a5:
d1:f7:2e:2e:cb:33:f3:95:18:38:52:02:16:1f:f8:fa:a5:c9:
6c:0c:97:ee:98:8e:77:0f:e5:73:93:fa:fe:8a:09:74:9e:cd:
00:01:b2:0d:d7:50:b5:44:6b:28:32:8a:5a:4f:8f:6b:2a:45:
d5:b9:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:53:07 2024 by rpki-client on console-fra.rpki-client.org