Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer (raw, json)
Hash identifier: lBR/K01uDtlAdIoc0EpLHQdRBR3e5R5yVbhBdqxnIP4=
Subject key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49228A35E18DE9D485ECE54F179228C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44999
AS: 196798
IP: 87.236.8.0/21
IP: 93.188.120.0/21
IP: 176.62.216.0/21
IP: 185.110.208.0/22
IP: 185.121.244.0/22
IP: 188.94.224.0/21
IP: 2a01:6e20::/32
IP: 2a03:ccc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:28:a3:5e:18:de:9d:48:5e:ce:54:f1:79:22:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:87:5c:6e:80:15:7d:c6:b0:9a:b2:8e:1c:
ea:e3:69:4e:31:8b:a9:52:08:12:b5:f6:53:8d:3d:
dd:a0:3a:15:36:e1:87:d6:7b:21:69:6a:e7:7a:32:
77:aa:5c:a1:fc:a3:09:ec:39:54:07:4f:c1:b9:8d:
6c:5f:60:0f:ed:5f:b8:d1:35:20:cf:87:e6:59:17:
e5:65:12:a0:39:e6:67:4d:11:f5:a3:98:59:19:18:
d2:37:91:03:5d:9b:b8:d5:8f:69:b2:48:04:96:af:
a6:5a:3e:3b:5f:66:44:1c:d3:ea:11:7e:21:10:bb:
7d:af:fb:f6:9b:88:d4:59:8e:49:87:44:7a:fb:d2:
14:55:92:47:28:09:9a:32:d2:db:e9:a8:0b:67:b2:
9c:d1:0b:be:47:3c:39:51:22:ed:2b:1d:60:36:69:
d7:d1:7a:c1:d9:52:4d:1f:08:cb:2d:bd:f4:f0:9f:
fd:85:a8:4c:de:4e:f2:6b:a3:e7:82:76:04:b5:36:
34:85:6c:96:77:1e:a1:2b:9d:95:a4:e1:38:c8:f5:
7e:93:78:e1:6d:21:14:85:3e:ae:48:15:66:70:ec:
12:f3:f5:ce:79:73:2d:44:c5:a1:b8:1f:ea:82:6a:
bf:65:d6:d0:f7:bb:33:be:30:72:90:14:f0:7f:f8:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.8.0/21
93.188.120.0/21
176.62.216.0/21
185.110.208.0/22
185.121.244.0/22
188.94.224.0/21
IPv6:
2a01:6e20::/32
2a03:ccc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44999
196798
Signature Algorithm: sha256WithRSAEncryption
9f:d4:70:38:a3:f4:1f:17:1d:c0:91:32:4b:ea:01:b5:7a:cd:
31:a8:35:32:da:88:d6:de:3f:be:03:76:b8:bd:42:db:24:95:
62:da:4e:57:31:6b:bf:f4:37:fa:8a:68:e1:12:aa:ec:02:0f:
4f:0a:50:8b:f4:23:71:66:cf:cf:3d:dd:19:3f:18:45:1c:e2:
a6:ee:96:d6:30:ee:cb:21:f5:42:57:0a:d7:b7:fa:04:09:66:
e7:8a:94:77:ce:c0:fa:96:4c:9c:9f:4a:c6:b0:cc:fb:2f:51:
0d:c6:93:81:00:8b:20:57:85:11:19:10:7f:53:99:96:76:82:
74:b2:0b:4b:d6:67:ce:86:24:bf:01:b4:03:72:b9:39:4b:18:
9a:3f:c3:49:ae:72:d0:b3:4d:3c:16:b7:1a:f3:f0:28:cb:59:
23:5c:98:72:27:52:13:20:59:3e:6e:61:c7:1c:30:73:3c:fc:
1e:60:8f:69:20:fd:09:8b:c7:36:62:bd:ce:ea:53:47:ff:6f:
ad:03:cd:2c:ab:82:dd:cb:a0:62:a8:a5:6b:2c:57:ee:24:e8:
35:36:63:5d:c1:ee:21:f7:51:51:c4:da:88:41:52:11:d0:64:
8e:75:00:6b:71:93:a2:9b:0c:8d:28:34:94:6b:a9:28:b9:39:
8b:8e:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:35:19 2024 by rpki-client on console-fra.rpki-client.org