Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer (raw, json)
Hash identifier: 0cMIq4QPWN3sQ3Wl318CruYp7GEW5ho5/I7kDUvFlLc=
Subject key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019073A7B2291846F8C0B2E42F60850800A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jul 2024 13:34:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49703
IP: 193.24.116.0/24
IP: 2a13:f700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:a7:b2:29:18:46:f8:c0:b2:e4:2f:60:85:08:00:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 13:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:57:10:35:fb:54:32:2d:55:b4:5b:5e:92:
7f:55:03:a5:08:f0:83:84:0d:4b:65:cd:8e:ad:29:
8d:c7:63:3a:dc:37:cf:e6:03:79:fe:88:d1:3b:50:
4e:d4:3e:46:da:9a:e6:21:74:bb:93:ac:f5:b7:4d:
7b:00:55:65:86:ac:dd:86:4e:f5:98:ba:64:a3:40:
7a:56:0b:f9:0f:55:82:85:69:79:0b:95:6a:22:c4:
d6:78:b6:bb:ca:4f:89:5e:a8:44:23:23:ca:21:0c:
9e:ac:11:09:8b:80:6a:71:ac:9d:92:81:a3:02:f7:
1f:81:25:9b:4b:66:ea:6f:6f:9a:fe:c0:79:6a:db:
6d:4d:cc:78:ae:2e:45:5d:2c:89:b4:2c:c1:c8:fe:
26:26:1c:c2:cb:a7:02:47:c0:dc:75:a6:42:c3:66:
1c:fe:ac:3b:ff:55:d8:ba:d3:49:42:bf:77:6f:43:
bd:f0:71:69:0a:00:80:fd:d1:9c:67:ce:8a:0d:c9:
e1:47:05:ca:9f:bd:b0:72:f8:cd:5b:9b:9a:dc:7e:
a1:79:f6:37:34:e5:dd:2f:c5:45:48:2f:06:76:03:
0f:73:ff:61:6f:55:64:bd:61:9d:47:82:50:cb:0c:
fa:56:3f:ee:10:0b:e4:50:2f:66:4f:00:d9:52:af:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.116.0/24
IPv6:
2a13:f700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49703
Signature Algorithm: sha256WithRSAEncryption
ac:b4:eb:85:a8:e2:a5:62:e4:c4:51:43:13:ee:63:81:68:9a:
19:42:b8:4f:33:07:3f:a9:41:08:19:cb:8b:3c:34:41:43:8f:
8f:7b:9a:2a:59:2e:9b:5d:be:f6:b8:a1:cf:18:e0:84:25:a4:
54:f1:03:3b:67:2c:0e:17:d3:18:a6:41:6e:ec:19:37:b7:19:
2d:22:85:a0:e7:6d:5e:97:54:12:6e:7f:87:33:7a:9d:a2:9f:
fc:74:ae:9b:b4:fb:b4:6f:cf:58:fd:f7:32:3c:bf:9d:39:f7:
6f:15:38:97:bb:92:50:79:7f:1c:9a:f1:5b:c2:de:c5:f4:2b:
e7:b4:1c:36:87:75:12:c3:0e:7e:f3:83:19:e5:b4:9c:1b:a3:
88:11:e6:75:d2:64:18:75:5e:69:20:c8:70:52:1a:c6:da:39:
82:28:45:11:e6:49:91:fe:19:1e:09:ee:a1:2f:72:7b:7a:08:
90:4a:42:e9:89:cb:bb:bb:54:ff:e9:a7:7f:ec:1a:74:1b:8a:
d2:23:4e:8a:6d:4a:35:72:7c:6b:78:18:ea:76:f7:9a:bf:35:
d2:ff:8c:19:21:8a:d8:48:28:60:0c:43:59:79:e4:71:8d:b5:
1c:29:25:fe:ff:c1:7a:07:cb:d1:06:d0:1d:65:c1:5e:bc:0a:
61:d6:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:28:25 2024 by rpki-client on console-ams.rpki-client.org