Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gkL-ZPQXLuuwyWr35QtipQd6_go.cer
File: gkL-ZPQXLuuwyWr35QtipQd6_go.cer (raw, json)
Hash identifier: XyaT4WqmmLzVAHZM/i5DXSzVKVENzWdYj5O2PLhAzLA=
Subject key identifier: 82:42:FE:64:F4:17:2E:EB:B0:C9:6A:F7:E5:0B:62:A5:07:7A:FE:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D41D7FF91F80D07F25D48D425062F2466
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jan 2024 18:18:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212516
IP: 2001:67c:2f14::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:d7:ff:91:f8:0d:07:f2:5d:48:d4:25:06:2f:24:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 25 18:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8242fe64f4172eebb0c96af7e50b62a5077afe0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c6:12:c5:50:d7:08:f8:ac:d4:64:7f:d7:cd:
8d:22:8c:a8:14:0d:0a:0e:85:cc:e7:b4:3a:1a:e9:
0b:01:cc:fd:bb:d5:09:21:ec:4e:68:24:bc:c7:3d:
fc:78:5f:97:b5:4f:1a:91:1d:b7:06:31:6d:ba:3d:
07:21:ff:27:41:ce:37:f2:92:cc:6b:fc:d7:00:53:
ff:94:fa:ce:00:36:0d:83:ba:07:67:12:e1:f0:87:
33:38:b6:b6:04:a5:51:38:24:d6:95:da:46:1b:6f:
a9:72:2b:5c:11:90:7e:78:21:ed:12:d5:16:b1:d0:
c3:f5:05:7a:e9:3f:ca:6f:4e:6e:84:73:44:8d:17:
55:8d:a2:63:1f:36:42:25:15:37:69:b0:b6:d1:96:
d1:76:a9:c2:6d:fd:ea:a2:1d:9b:3a:54:e9:64:13:
e7:bc:ab:ce:ff:1b:3c:91:40:7f:4a:bc:45:87:ef:
b3:36:26:d8:0a:ad:13:47:f7:65:7f:48:18:99:16:
0e:14:21:9b:f5:0e:54:39:83:e3:b3:72:23:47:e4:
8d:ae:99:d3:38:65:c8:f7:cf:ea:c0:f9:b3:97:8e:
39:17:45:99:6f:ca:da:bd:72:0e:2f:df:d9:43:fd:
fa:d2:26:cb:8b:3e:bd:5a:90:9f:f3:b7:e0:f5:b3:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:FE:64:F4:17:2E:EB:B0:C9:6A:F7:E5:0B:62:A5:07:7A:FE:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ab3d97-cd82-426c-b74a-e0c1dfde824a/1/gkL-ZPQXLuuwyWr35QtipQd6_go.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f14::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212516
Signature Algorithm: sha256WithRSAEncryption
30:8f:da:d5:9a:e6:cf:5c:63:44:98:36:6b:4a:a5:a6:75:57:
d9:02:2e:ed:c3:3b:82:4f:b4:ee:89:62:4d:c1:1b:62:9b:60:
dd:b7:61:9d:bf:57:be:1f:16:89:9d:d1:bd:4a:9e:0c:ca:e7:
d0:a8:d8:e8:99:64:ca:af:9c:52:bd:16:5f:b6:8c:71:d2:e6:
ca:6d:9e:53:f3:2c:77:43:cf:fc:dd:74:e1:fd:37:be:0d:b3:
1e:6f:83:d4:ef:1d:14:ab:73:5f:3d:44:93:3a:9f:30:e5:19:
b8:9c:0d:18:51:7c:53:6a:df:9b:7b:e7:34:fb:0a:9c:92:16:
0f:82:15:a2:c8:b2:58:93:33:09:00:ae:5e:69:d0:12:86:ca:
3c:26:0e:8b:3d:f8:05:a8:82:cd:61:f7:31:1c:95:3b:1d:e6:
32:f4:6f:34:c1:2c:20:c5:5a:20:3f:e5:8f:f0:0e:a3:df:f1:
29:2f:f0:92:86:4d:19:dc:dc:40:50:e7:3e:bf:81:97:ef:3e:
99:aa:81:b6:7c:02:fd:4a:6b:04:27:30:27:61:93:e5:08:d1:
30:2c:6f:89:5c:ee:98:48:3d:dc:81:e9:2c:25:ae:7f:0f:8b:
5a:a8:58:cd:64:3f:87:df:0c:78:d0:30:90:cc:dc:b8:e1:ce:
94:25:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:32:08 2024 by rpki-client on console-ams.rpki-client.org