Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
File: gWaEopWOAZDycKgKmHiTGeHO5Ng.cer (raw, json)
Hash identifier: 5NuB7TPF9NxG5yTyiaev/M9u8P2RNEySo9qy3jetxhI=
Subject key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D47FBECB1BD311EA660320EF6CD2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51910
IP: 46.17.72.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:fb:ec:b1:bd:31:1e:a6:60:32:0e:f6:cd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=816684a2958e0190f270a80a98789319e1cee4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:30:3c:35:95:6c:ed:5d:a2:81:e7:1a:b1:
34:a3:3c:c2:80:68:21:77:fe:da:e2:c5:5f:e2:ac:
27:41:26:5e:aa:db:d6:21:0a:39:86:a4:84:3e:62:
cf:5c:6b:06:fc:66:d1:57:f8:04:d5:54:05:42:88:
f5:e0:a5:50:2f:ac:9a:06:f9:b2:fc:b1:b4:c6:1d:
01:90:9b:c3:89:0b:6c:92:0c:c1:03:cf:30:7a:c9:
2e:1c:9c:03:3a:16:f4:c0:a6:74:bb:33:f9:b8:10:
f6:92:cb:19:33:23:cd:a4:fb:a3:2f:65:ca:0a:4f:
69:b5:6d:03:87:27:2d:df:f3:ca:f6:ca:e2:03:62:
75:16:f1:42:a6:f3:2d:c6:fc:78:fd:74:d5:f0:7a:
55:f9:2b:76:36:c6:3e:de:f7:1b:b6:c7:53:10:22:
50:58:c4:1b:38:8a:8c:bb:bb:f8:88:89:6a:20:dc:
5a:d3:20:6f:dd:39:0d:48:9c:d3:dc:6b:07:2c:d1:
b7:e5:3a:9a:aa:41:f8:f3:90:21:fb:3b:d5:5c:9a:
00:c2:02:ea:0f:7e:9e:00:81:73:2b:e8:a0:93:e6:
60:5e:c8:14:e3:2f:6f:90:73:84:21:dd:51:cb:d6:
f8:1c:1a:df:75:c9:dd:53:03:b2:d1:a5:94:16:2d:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51910
Signature Algorithm: sha256WithRSAEncryption
64:38:b6:3a:1c:e7:61:ef:d9:ca:29:2e:0d:a9:34:94:c6:c8:
ea:33:02:de:e1:67:62:13:be:b9:d4:3b:3f:67:8e:b2:10:0b:
81:4b:19:29:0c:04:4b:4b:24:f4:4f:33:90:b1:58:07:43:2f:
d2:6e:98:f8:d2:80:a7:e2:15:b1:a2:51:52:ed:bb:b5:5f:3b:
8d:41:f2:b6:d4:0f:de:96:d6:53:17:49:35:91:79:19:10:81:
1e:81:58:7c:b0:08:24:db:5b:34:9d:cf:f5:1d:94:14:7d:61:
23:ea:fa:5c:bb:2c:cc:a3:59:66:57:30:fb:c8:f4:83:10:46:
25:20:e8:cd:03:dc:10:57:3d:fa:a1:ea:d9:aa:7a:d6:a7:ab:
d7:03:5b:2f:08:a2:ae:f7:2c:05:08:0d:87:7e:30:66:91:e9:
e9:87:bf:af:f3:a2:4f:5c:fe:66:6d:5c:b9:14:51:35:f0:97:
9e:ae:77:63:c8:a7:cd:12:12:48:ef:f9:b1:24:2d:42:1b:a7:
29:7b:38:73:f9:6f:7d:e6:06:13:08:d5:bd:c6:bc:f9:38:8c:
36:db:f3:28:44:f1:2b:90:35:e1:9d:c9:0a:a5:f6:12:ac:b9:
2c:a4:26:fc:b2:e7:3b:1e:15:12:8b:ef:2f:fe:61:b9:d4:fb:
3b:08:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:57:27 2024 by rpki-client on console-ams.rpki-client.org