Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer (raw, json)
Hash identifier: Hb8TR2pF27nf+TLT8M4VHXeb80bEtcBDXc4qS9sJAaY=
Subject key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D67A7803653A227E7966D9EEABBFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209377
IP: 152.89.4.0/22
IP: 2a09:2c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:67:a7:80:36:53:a2:27:e7:96:6d:9e:ea:bb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:e7:e9:cb:21:2a:23:96:22:c6:46:5d:c0:
83:9c:10:71:62:22:f2:69:d8:b2:75:7a:52:1e:a7:
f5:2a:27:5e:7a:71:30:d0:e2:29:e7:9c:50:dc:89:
c4:7a:df:80:f0:30:fd:f5:4b:f3:66:45:89:08:f6:
a4:d7:0d:42:4a:5b:8c:72:0e:34:b6:f3:e0:b3:d6:
a8:cb:a7:76:68:12:c6:55:6a:f2:94:ad:86:d2:55:
bf:d0:38:c8:2b:06:3c:fb:37:d1:65:3d:f4:99:ab:
18:6d:e3:64:36:78:af:c6:54:78:09:ef:82:c6:fe:
79:76:f2:40:c8:26:6b:6b:44:a0:51:52:04:3d:4f:
f2:54:4e:cc:06:41:98:c3:27:00:65:a1:73:c8:04:
45:58:85:49:f9:73:d6:f2:8f:80:ee:40:4c:31:d8:
e3:a1:37:25:13:6d:3c:55:08:39:92:bb:51:33:ed:
d7:08:a4:85:85:f1:46:8b:7a:5b:20:89:1a:ac:e8:
ce:7c:6d:df:1b:d0:e4:e0:bb:30:97:bf:d1:ed:5b:
f1:5e:59:54:df:e7:9a:84:2f:24:c9:bb:20:9f:13:
63:cd:ed:48:36:7c:a0:04:4c:c2:63:e2:3d:00:0c:
4d:2e:c7:44:50:83:6c:97:30:90:12:40:75:38:3c:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.4.0/22
IPv6:
2a09:2c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209377
Signature Algorithm: sha256WithRSAEncryption
05:3f:a8:cb:44:6a:35:70:2e:bc:fa:05:29:14:71:cd:1c:31:
79:75:d5:24:59:7b:eb:01:49:61:0f:63:af:59:03:1d:f1:07:
83:0c:dc:bb:54:7e:62:bb:f6:4c:b1:40:a1:db:04:c9:85:e3:
61:68:54:08:d9:de:1c:13:15:fd:ac:5f:a3:e4:70:af:12:b7:
dc:cd:fc:a3:a3:68:10:19:2d:34:51:86:b1:a5:ef:62:63:af:
b0:33:68:7a:91:6a:a4:f3:f5:29:0e:f1:7b:d5:f7:e6:7e:01:
c3:39:53:8c:e4:05:f8:44:c5:b9:c0:e0:e9:dd:54:b7:f5:1d:
46:cd:cc:da:62:5b:f8:2a:bc:76:96:0a:40:ea:8d:b4:c5:52:
10:11:25:db:58:6a:0b:36:a1:12:80:93:3a:db:f9:04:ff:58:
97:3f:1a:8a:09:16:bb:b9:cf:12:c2:6f:4f:d1:cf:9b:14:fc:
7c:a4:74:23:e1:00:32:d8:1b:b1:30:72:ef:12:79:b1:a1:79:
e1:3d:31:c0:02:35:59:61:d4:fe:5c:0a:32:c9:60:1f:37:01:
78:15:d3:d6:cb:1e:52:af:bd:9e:70:76:09:0e:6e:bd:0b:e9:
90:81:a5:68:07:92:12:b0:47:76:ff:95:bc:b0:7f:9c:e8:1f:
f4:c7:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:25:14 2024 by rpki-client on console-ams.rpki-client.org