Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer (raw, json)
Hash identifier: 8gQCe/Fz4F49IUqVx1XyNKtiOthTbZ9lqFr1vXY+Avs=
Subject key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B10E1AF8931F4692AC49556D88F4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43178
IP: 91.194.126.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:10:e1:af:89:31:f4:69:2a:c4:95:56:d8:8f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:51:01:56:31:2b:84:47:25:b6:8f:4d:43:
f6:f0:65:03:8b:8e:49:ad:b8:d8:89:8b:5f:ab:1c:
14:dd:e7:e1:f0:f7:82:4a:9f:53:ee:10:85:f7:0e:
5d:81:c8:42:02:30:dc:e8:f1:fb:de:59:e2:15:0e:
1d:af:e8:c1:bd:fa:e0:e9:25:cb:e3:e8:2d:83:f9:
c4:72:33:aa:3a:39:fb:cf:a9:2a:76:44:4e:be:47:
e8:c2:a8:87:c5:54:91:c8:1a:27:bd:f2:d0:26:d7:
78:9f:db:c5:d6:2a:31:a8:87:63:2a:cc:78:82:ad:
25:a7:f6:84:be:2f:b2:dd:ca:88:8f:4c:56:3d:22:
6f:13:b0:9b:b2:e8:cc:16:d7:cc:ce:89:ce:ff:04:
67:37:df:c0:92:2d:3f:c7:f9:93:02:33:eb:68:9a:
81:82:64:0d:76:c4:cc:4c:da:2b:b5:38:05:47:95:
d1:7d:fc:f1:db:58:93:24:fc:b5:16:58:a0:f9:03:
f8:14:fa:46:c9:43:1f:2b:a3:61:e4:f3:32:c6:fb:
b5:1a:af:3a:4c:20:23:75:96:29:8c:2d:31:d8:7b:
b4:4f:ee:c8:e4:e3:cf:0d:3a:f2:71:d8:f2:af:2b:
7c:4f:6a:ad:06:81:67:bf:93:24:18:83:4d:4c:d6:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.126.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43178
Signature Algorithm: sha256WithRSAEncryption
13:a2:bf:f4:75:99:51:31:fd:29:69:2d:0c:56:89:54:27:b4:
59:cf:8d:0b:06:7d:eb:79:8a:73:92:78:f9:8f:6d:f2:32:7d:
f6:9e:f1:27:b3:ba:ec:99:3e:8b:fc:6e:42:09:d8:d5:61:f0:
02:df:a3:40:13:64:f7:e2:9d:c2:c4:eb:d6:11:0e:7f:75:76:
32:92:3c:b5:fe:a6:17:91:bb:77:00:b2:26:3c:84:3a:86:0b:
53:33:97:77:e3:5f:bc:d9:4e:e9:95:9b:ff:da:b3:03:87:41:
53:19:f4:4b:73:39:41:57:55:a8:96:1b:21:41:e8:fa:c4:5d:
7b:0d:c1:95:66:9e:c1:51:56:23:26:c9:69:80:af:01:60:6b:
62:ec:d5:29:55:ad:e1:b6:93:54:9b:e3:f5:33:17:92:b2:81:
ef:e3:2c:92:48:78:34:d9:2f:2b:c2:34:8a:e0:c6:44:f3:49:
f3:c5:a5:aa:25:e7:37:8f:e5:d9:4e:05:74:ba:c1:7e:56:b4:
b9:db:3c:4d:83:55:ca:76:1c:71:31:70:57:94:ab:e4:b2:60:
37:85:85:ee:87:ff:6f:8e:82:65:6d:dc:21:9d:f0:94:24:01:
2f:e4:a9:32:cc:51:d6:3f:68:14:dd:2f:20:1a:70:cf:56:b0:
5d:5b:50:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:59:09 2024 by rpki-client on console-fra.rpki-client.org