Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer (raw, json)
Hash identifier: P1BVOaXLD1EMOCM9PcBGJvJWIKcb7uCSx9bogE26y+g=
Subject key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168EB618F618C249F1653C26546DAC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 42615
AS: 203729
IP: 185.186.8.0/22
IP: 2a0b:6b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Mar 2023 07:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:eb:61:8f:61:8c:24:9f:16:53:c2:65:46:da:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:a4:6f:1d:cf:5a:cc:92:11:87:4d:ba:70:
89:76:8e:08:db:09:bf:18:cd:2a:bf:cc:1e:1a:51:
64:ac:c7:5c:99:19:21:84:c7:29:9d:d7:c9:63:e7:
9d:8d:92:2e:05:64:2d:3a:dc:e8:40:b9:48:a2:51:
ff:ee:27:6c:d4:48:ac:2d:e6:cc:d6:ee:e8:56:39:
e8:df:1c:fa:c6:f6:65:43:8c:18:0b:77:f7:46:5c:
16:7d:66:29:cc:dc:d6:9d:ea:38:ec:fd:67:c4:e7:
1e:96:96:bb:e5:b6:62:fd:64:f9:7a:88:5a:89:e2:
08:f6:3f:98:a8:de:ea:35:48:f0:ba:31:7f:5f:17:
04:7a:46:c0:72:18:c1:f4:b1:cc:3b:94:81:e6:b8:
b2:bd:25:c4:e8:2d:35:3f:15:39:c7:11:11:37:8b:
96:3d:8e:e6:37:9d:cc:7d:68:67:42:e6:72:ef:45:
ee:21:6b:20:e5:a2:d7:e9:7d:a6:3f:a4:d2:7f:c8:
23:2a:2f:a3:dc:0e:32:23:5c:2c:72:a4:17:85:a9:
93:88:95:d5:23:c9:24:6e:4e:07:12:76:24:12:cf:
9f:e5:f4:41:39:de:18:50:37:40:df:21:d6:e8:2f:
53:5f:f3:39:eb:99:bf:e4:cf:e1:70:46:a8:7b:dc:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.8.0/22
IPv6:
2a0b:6b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42615
203729
Signature Algorithm: sha256WithRSAEncryption
7f:e5:91:ba:13:e1:0e:6d:7b:0e:bc:93:aa:f3:bc:a0:95:74:
b6:96:c1:d0:dd:bd:3f:bc:7e:95:9a:74:f9:e2:8a:67:7b:52:
5c:05:13:d6:a6:24:ac:de:82:3d:00:ff:ab:76:85:05:17:0c:
f4:6a:a9:dc:b9:f5:aa:76:69:83:36:04:07:eb:48:15:1f:50:
9c:e5:cd:78:db:2f:39:97:d9:10:ff:c8:4e:24:43:12:69:ce:
d6:79:10:9d:88:1c:24:5a:25:e7:eb:3c:d0:c7:87:af:dc:bd:
9e:2d:33:98:d4:52:46:57:66:8a:a4:44:df:39:72:02:62:ca:
99:6f:5c:82:6e:f1:7b:04:cd:51:bd:51:71:57:dc:97:05:66:
7d:68:9b:02:c9:57:82:af:9c:03:b4:37:f8:a2:2a:1d:b6:db:
79:d7:3c:b9:38:22:bb:db:6b:6d:ee:69:72:25:1f:72:cb:34:
58:78:dd:f1:4f:4d:0b:f2:37:07:cc:08:6a:f0:e1:21:55:17:
51:30:a6:55:52:8e:4b:c9:b6:66:b4:f8:c7:2f:2c:72:2d:69:
bf:54:4e:c9:21:88:a6:9d:04:e3:36:d5:df:cf:f8:92:02:64:
f7:71:ae:d8:55:10:66:b4:ed:f5:70:c3:c7:fa:b4:28:79:08:
1a:db:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 12:55:48 2023 by rpki-client on console-fra.rpki-client.org