Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer
File: giKx_lqaAWNQKFrAeI08yrPrORk.cer (raw, json)
Hash identifier: cZPnze8LP8i19NhVolQgcW31NC31VVXj8WGQIlICqNo=
Subject key identifier: 82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E09FEDE14B7D9FF796771A5C5CA75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202375
IP: 45.135.196.0/22
IP: 185.243.92.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:09:fe:de:14:b7:d9:ff:79:67:71:a5:c5:ca:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8222b1fe5a9a016350285ac0788d3ccab3eb3919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:88:f9:eb:36:41:c5:15:69:d9:cb:27:5f:
c3:ea:60:08:e0:83:9d:25:9e:65:dc:82:62:f2:c3:
f4:d8:3e:a9:1a:19:8f:69:32:b3:fc:9d:b1:13:f6:
15:40:19:bc:77:d8:2c:f9:5d:1a:66:9d:29:00:13:
d8:ed:26:90:78:27:e0:f3:79:51:3c:38:45:1e:68:
b4:ee:a5:5c:cb:20:6f:a7:b4:71:c5:17:69:34:64:
71:0c:66:b8:50:48:81:28:17:7a:97:c5:1b:68:79:
eb:8f:4b:05:50:a5:63:45:0e:c3:df:96:33:3c:43:
88:c0:20:b7:c8:19:46:fd:e7:4c:c2:e7:f4:9a:99:
a3:45:25:30:7c:99:d7:bf:af:80:fc:39:35:ed:ff:
3c:84:99:85:1a:7f:8d:95:3c:7b:56:04:a3:72:18:
99:a6:81:54:93:5c:f0:98:16:99:68:16:45:cd:89:
26:28:2e:46:bd:c6:e3:96:a7:01:25:8a:db:26:04:
ac:78:83:29:3a:21:bb:b9:76:66:ca:05:95:e7:90:
f5:9d:19:39:3d:44:a0:bd:2a:04:18:de:8f:46:22:
d5:e2:9c:f9:44:16:1f:d2:d7:9a:49:4e:85:06:c5:
90:17:ea:c7:67:6f:f9:6c:b5:08:7b:b4:c0:6f:8e:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.196.0/22
185.243.92.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202375
Signature Algorithm: sha256WithRSAEncryption
67:6d:74:21:38:37:2b:be:d9:f7:09:e3:14:24:5d:96:a1:45:
f7:30:7a:ea:5b:31:36:62:8d:58:30:9a:8b:b4:98:72:1e:d4:
7d:e2:84:3f:11:87:b4:3d:5b:f8:7e:ec:0f:14:69:09:ab:a7:
e9:7e:8e:26:b8:96:7b:9f:a9:5a:3a:1f:dc:34:04:19:8b:48:
b4:07:24:13:b2:c3:aa:dd:e7:dc:01:68:56:b8:85:e9:35:ab:
dd:21:1e:72:6a:53:d5:fe:17:92:d1:2d:ec:ce:3e:eb:b8:49:
2b:ff:b0:e2:de:0a:8d:ab:5e:fe:80:33:d9:57:6a:7a:a4:e4:
a8:3f:96:9d:18:e5:ec:7c:a9:c1:72:3d:85:d6:68:b4:52:eb:
f6:80:d8:49:29:de:69:9b:58:07:a3:9f:9a:6c:a2:1f:c6:24:
28:53:fb:82:d0:af:a3:9e:fd:7c:d5:94:64:e5:d6:54:bb:ac:
74:27:33:41:41:4e:a6:59:05:3c:b6:5a:1e:26:83:4e:5b:fc:
da:b3:eb:4e:dc:ed:17:b2:41:15:da:ef:b3:ab:d7:fa:0b:c7:
d4:ef:f9:0f:f4:85:e0:b9:b6:44:7b:6d:66:dd:00:21:f9:31:
24:d6:33:89:42:73:6d:62:5d:3c:a7:71:aa:d2:84:ea:dd:b9:
25:1c:6b:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 02:09:31 2024 by rpki-client on console-ams.rpki-client.org