Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
File: gs1f087z4cqiC7ph-i1RtrlOtU0.cer (raw, json)
Hash identifier: ZclZ4ukePrYdUaDDmIVSsUK/jNLQ7OXL/Gkjc0xpC3c=
Subject key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42559C2ED65CA0B5D54E3B00D4BAD4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203495
IP: 185.133.52.0/22
IP: 2a13:a9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:59:c2:ed:65:ca:0b:5d:54:e3:b0:0d:4b:ad:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:e4:9f:4c:92:94:67:09:2d:dd:f7:09:45:
44:7c:31:79:3d:6f:4d:26:15:b3:76:8f:70:54:14:
82:7a:a3:56:c3:96:64:c7:d0:92:0f:37:23:c2:6c:
b1:20:72:7f:54:1d:22:8f:b1:92:74:94:b1:71:e4:
d8:b6:ab:ef:3b:13:0e:8c:9a:91:75:db:13:24:e9:
e1:ea:45:4f:9c:28:42:e3:3f:12:82:40:08:16:c8:
db:65:f7:a8:39:50:31:a7:1e:f3:9f:15:9e:c0:44:
f7:95:1a:13:76:6e:ab:9f:3e:d7:47:6d:9b:3b:da:
9d:a1:7c:12:c4:84:9e:f8:f0:b2:8e:87:00:11:4d:
6d:4f:96:d9:c4:e6:33:09:25:ba:59:6a:a2:d1:1f:
85:45:2f:bc:fe:80:18:0d:81:87:d0:31:4d:4d:e1:
17:35:d1:85:37:09:e3:2e:85:dd:19:83:cf:23:7a:
fe:29:83:5b:1c:b1:61:ac:19:7f:47:6d:88:90:ff:
cb:be:f2:33:a1:d7:8e:24:5f:41:4e:10:70:c3:1c:
4f:53:e0:0b:64:54:c1:46:24:d8:62:c3:eb:c8:74:
1b:1a:e2:1b:62:d6:cd:d2:9c:a3:f9:dc:e8:ab:1f:
91:b6:eb:77:7f:e7:60:10:57:56:15:7c:7f:31:a3:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.52.0/22
IPv6:
2a13:a9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203495
Signature Algorithm: sha256WithRSAEncryption
4d:87:ae:5f:10:4c:1c:f6:50:8f:b8:a5:a3:e4:31:65:b1:36:
1e:26:e6:e3:f1:d5:87:81:a1:ce:74:64:1d:a1:b9:bf:ca:5d:
33:00:bc:1f:e3:8c:17:4e:aa:60:3a:f9:df:8c:2d:d0:c0:01:
43:c8:d3:2b:db:87:71:e3:7b:2c:b4:2f:cf:f5:97:66:d8:f3:
2a:b5:94:d6:54:d2:0f:70:57:fb:35:ed:9a:34:6c:64:e7:f8:
be:5e:01:20:4a:63:2f:22:c2:ac:f0:00:99:71:29:48:a1:b5:
83:94:7b:52:1d:3e:63:dd:68:af:81:39:68:72:83:fa:ce:bd:
86:ab:41:05:fc:0d:aa:11:0e:73:97:64:04:e9:a0:70:7f:a0:
4c:60:6a:54:aa:d1:1b:20:2b:ce:47:ae:31:f8:6d:c1:09:37:
dd:cd:14:ee:3a:63:41:13:e8:71:29:ea:f3:72:0d:b1:e6:7b:
67:bf:28:30:86:90:9b:ee:d7:38:6c:b4:1b:d8:22:79:eb:b8:
70:e0:e4:46:73:8c:36:98:bf:b4:68:0e:97:c0:0c:e7:1e:19:
cc:48:f2:b9:6c:8e:f9:fd:5f:38:96:eb:d1:f1:d2:4e:88:e5:
99:2a:9a:3d:a2:5e:8e:1c:2d:f9:94:1d:70:4b:63:ca:26:22:
56:f9:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:35:42 2024 by rpki-client on console-fra.rpki-client.org