Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer (raw, json)
Hash identifier: fDbc2kt4mjTK2d2S9Vg2Mr8nR6kF/dBMSh/uvqK3w/Y=
Subject key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492ED7CE814C9D7B4601AC996A6B965
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199669
IP: 46.29.118.0/23
IP: 91.109.200.0/21
IP: 93.183.104.0 -- 93.183.119.255
IP: 176.123.188.0/22
IP: 185.10.44.0/22
IP: 185.71.196.0/22
IP: 185.179.160.0/22
IP: 185.195.170.0/23
IP: 2a03:ec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ed:7c:e8:14:c9:d7:b4:60:1a:c9:96:a6:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:7c:97:cd:84:be:1d:01:8a:e2:a7:90:54:
b8:ad:5f:41:df:44:c8:ce:82:da:a9:66:3d:e5:6b:
b9:74:79:a3:95:2b:23:54:9e:ee:60:90:35:75:94:
61:50:7d:73:79:a7:e5:27:d8:53:fe:93:dd:87:2c:
33:48:20:ae:a9:fc:dc:9a:10:cb:ce:5b:2c:1d:bf:
94:67:4c:1f:dd:d7:26:70:3f:54:7c:3e:44:2f:76:
50:14:7a:59:c5:09:9a:8a:20:ca:bf:04:21:5e:45:
c9:a5:b1:e8:79:e0:6d:03:7c:d3:b3:93:14:95:7b:
9c:87:e4:84:b0:44:3b:66:04:d1:30:93:93:58:e7:
ad:cc:8a:9d:fa:fd:74:e7:f7:0f:86:00:41:81:25:
ef:c3:38:2f:77:17:c6:36:ad:3b:09:6a:52:87:f8:
3e:2c:cf:92:20:f8:a9:fb:4b:bc:ee:fe:0d:30:ea:
ad:e6:8a:96:8b:78:8a:00:0c:15:2a:e8:cb:ed:9a:
30:c3:d4:1f:c9:bd:07:7c:3a:eb:c3:d2:70:13:9e:
33:12:50:8f:5b:d0:f7:11:61:ae:76:0d:75:3b:0a:
63:ab:9e:3b:01:9d:27:67:34:97:df:84:e1:be:e8:
49:40:6d:cb:77:19:f8:f5:e4:ed:b9:fe:f4:49:94:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.118.0/23
91.109.200.0/21
93.183.104.0-93.183.119.255
176.123.188.0/22
185.10.44.0/22
185.71.196.0/22
185.179.160.0/22
185.195.170.0/23
IPv6:
2a03:ec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199669
Signature Algorithm: sha256WithRSAEncryption
44:b4:bf:cb:e8:ae:5e:e4:b3:2c:f1:93:74:cb:50:01:b2:ee:
d5:21:d4:1c:24:d6:16:2d:ea:29:7e:05:83:fe:32:00:5b:f7:
05:ec:9b:90:8e:02:cb:bf:6f:0d:84:d8:38:10:73:da:33:9b:
d9:39:b3:bf:86:b8:d5:bb:a5:dd:ec:4e:bd:10:15:6b:c7:c3:
14:49:d2:86:8b:2a:bf:c4:e9:c2:54:e7:7a:d3:fb:bf:0a:12:
00:1a:8c:f4:79:7d:82:fc:1e:27:a6:3e:76:0e:7c:e1:f6:57:
2d:49:49:12:3c:7e:31:f5:02:40:9f:19:13:2b:95:75:e0:96:
23:3d:57:61:b0:c6:96:fb:f4:4c:12:80:96:fc:b0:d8:3a:33:
18:a2:46:21:f9:69:28:d9:d0:a2:bd:8b:72:9c:39:15:d6:ce:
97:0b:d3:00:5c:67:33:c5:44:2e:a4:b1:ee:c7:24:2a:a4:7e:
c2:c2:d9:a8:e2:f3:a1:2f:0f:5d:2d:a6:6a:3c:9f:44:a4:04:
53:04:80:26:2d:dd:3e:5b:cc:b3:00:07:75:f4:57:fb:9c:21:
5a:65:95:ea:98:00:06:78:bb:1a:93:e9:32:cf:3e:7c:a4:46:
c5:68:87:77:7d:15:17:2b:a1:9c:21:cb:84:18:71:0a:4e:52:
4c:27:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:10:34 2024 by rpki-client on console-fra.rpki-client.org