Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
File: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer (raw, json)
Hash identifier: faBp07dcGA0X1hfklgZWSyIZ4tv7feD4rGcAuE6k6qU=
Subject key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCD0FBFC127CBEF39F830D50CD4A42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57824
IP: 176.109.144.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d0:fb:fc:12:7c:be:f3:9f:83:0d:50:cd:4a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83c8d01caf2b0751d035c537566f45627925e4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:9e:b2:80:71:67:fa:77:63:cd:71:fa:58:
98:db:da:e2:5b:03:71:19:dd:d2:aa:7a:3a:2c:b8:
f9:b0:8f:b8:39:8a:89:d8:5a:64:7f:34:4e:5b:08:
d2:f2:2f:5f:ca:8a:e6:34:dd:9b:e3:2b:74:c5:c3:
d0:9b:10:bd:0a:a5:eb:68:b2:d8:42:3a:e1:0b:b2:
63:ef:a7:e3:77:38:b4:b8:c9:bf:6c:fc:b5:ee:7c:
10:f5:05:fb:07:a5:ab:30:8f:57:b2:6a:a4:9e:0a:
25:15:53:22:6b:be:a2:54:bb:6d:0c:db:95:cd:26:
60:c0:f4:f1:69:25:5b:ac:d3:03:93:c2:8b:68:71:
a9:5d:de:18:0f:8e:fe:c1:de:34:bd:db:12:ef:28:
ea:28:b0:95:12:f2:db:ab:e1:01:30:1a:6c:49:65:
48:98:ce:7f:4b:80:12:29:33:38:bc:a9:61:9a:dc:
84:d0:22:f5:0c:86:c0:c6:8e:5a:7e:b3:6d:20:13:
19:ce:6c:d8:f3:ba:21:0c:60:de:7a:b4:b3:1c:f5:
40:4e:d3:cb:c5:52:f2:c6:b9:66:cb:f3:65:16:69:
b7:d9:28:a0:40:ba:e5:ab:f5:99:9b:41:e4:bf:81:
b6:4e:5d:fd:42:3d:77:1c:5b:43:30:bb:2a:35:49:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.109.144.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57824
Signature Algorithm: sha256WithRSAEncryption
80:5a:80:a0:de:08:fb:87:3e:2e:09:6d:41:64:dd:ed:44:1e:
d8:da:fa:d5:56:8b:e4:8b:73:00:0a:88:0b:fc:32:ec:7b:c0:
f8:b7:68:45:80:68:a9:e3:4d:dc:0c:dd:d2:88:ff:0a:a0:c7:
2e:9a:35:31:6e:ab:4b:26:0c:01:bb:8f:e1:89:e7:59:a3:ad:
04:a8:6e:ee:ca:41:bc:6c:4c:7f:64:91:e5:b6:c3:30:a7:04:
ba:7a:4b:0b:6c:e3:7d:55:cd:5a:9e:82:a4:4d:a1:4c:27:73:
34:01:55:e7:9e:62:c6:06:29:d2:19:99:da:82:4e:81:af:60:
5a:74:41:f4:79:bd:75:88:2a:af:14:d0:b7:42:26:49:05:90:
de:34:bb:c4:8c:2d:7e:c3:ae:c0:26:b2:2b:e2:33:f2:be:2e:
3e:07:77:c7:88:36:3e:3f:11:5d:2d:21:83:1a:1e:61:bb:f6:
77:75:02:f1:31:0b:d7:ad:ff:c8:1c:53:2f:4b:ce:d1:65:33:
7f:3f:3e:3b:c2:81:45:25:17:d8:3f:e5:cb:d9:6c:a5:fa:dc:
7e:fb:9a:b8:27:dc:24:2a:0f:a4:d2:f5:bb:00:13:76:30:9d:
3a:5b:66:84:a3:a8:d1:ef:f2:c6:f7:05:46:eb:4b:61:25:31:
95:ce:22:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:24:51 2024 by rpki-client on console-ams.rpki-client.org