Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
File: pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer (raw, json)
Hash identifier: KGph3Aw3KdA7jv0ylFGnc14JPNjAmlBLjaDvBrSzEow=
Subject key identifier: A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CD8ECF3B4CD42DC7B1417EB358850742B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Jan 2024 09:20:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61099
AS: 64479
IP: 185.0.24.0/24
IP: 185.216.12.0/24
IP: 2001:7f8:4f::/48
IP: 2a10:d740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:ec:f3:b4:cd:42:dc:7b:14:17:eb:35:88:50:74:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 5 09:20:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:11:4d:85:b1:a4:64:9c:5a:9d:12:a2:22:
8d:a2:f2:57:2a:f0:be:66:04:dd:a7:44:16:a7:79:
09:93:cd:3e:7d:a7:f6:9f:d5:bd:12:63:e9:fa:1e:
b2:e4:ea:a7:0f:ef:1f:f0:51:e6:cd:95:41:41:7e:
74:ea:83:e5:2b:f4:51:97:a1:b4:27:fc:88:5d:2f:
f7:02:3e:0d:ca:83:4a:c5:3d:b7:e7:ef:83:24:9b:
ee:77:d6:bd:d1:3a:39:ea:f3:9f:07:50:8a:d1:47:
1f:86:4e:29:9c:75:94:de:5c:2f:e8:74:19:af:ba:
20:7a:bb:7d:b7:77:79:5f:26:3b:bb:8f:ba:b4:66:
96:e5:4c:07:ac:ab:ab:61:28:26:7e:47:b7:a1:b6:
97:e9:da:db:87:37:39:8d:05:df:39:c1:2a:59:76:
d7:1d:ca:cf:32:4d:1f:61:6c:bb:de:0c:2c:5c:97:
d4:d2:14:8e:09:fc:45:f2:71:eb:6c:b5:ad:35:a3:
c8:ed:b3:5d:61:60:e4:7c:fb:dd:fc:55:08:64:52:
b5:d3:be:07:42:9b:7b:1c:ba:5e:8c:63:2b:77:cd:
2a:a8:e7:c1:1a:3e:ad:bb:e7:9b:6b:d9:f0:04:82:
42:6f:7d:e6:c3:5e:ca:8a:89:9e:04:2a:6e:5e:2a:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.24.0/24
185.216.12.0/24
IPv6:
2001:7f8:4f::/48
2a10:d740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61099
64479
Signature Algorithm: sha256WithRSAEncryption
8c:49:cf:2f:53:c1:5c:ab:30:d9:fd:f7:96:59:05:78:56:b9:
e2:00:f6:dc:f1:8f:dd:5a:d8:96:e0:91:f0:0a:f2:d8:67:57:
fa:ef:3f:16:e4:8d:e9:02:00:29:9a:b3:82:41:74:b9:83:46:
64:b8:1b:81:6b:5d:46:26:15:cf:75:fe:9e:db:2d:8c:fe:8e:
d8:6a:fa:ca:b7:e5:9b:f1:c3:ce:ab:42:ed:25:4d:64:09:f1:
d1:82:0b:2a:f0:86:15:d7:5a:83:7a:de:48:c5:0d:6b:9e:aa:
a3:8a:4f:2c:fe:b7:69:31:b9:22:d2:43:2f:3d:02:f1:8e:ba:
69:45:71:ac:97:de:5e:65:55:22:fd:79:7e:bf:87:e2:43:94:
91:f8:c2:e2:bf:6f:15:83:01:96:12:22:f4:87:f5:7e:f2:92:
aa:65:89:1a:ed:e0:87:ce:50:a3:bc:9a:ab:85:85:06:3c:38:
4e:1d:74:4c:49:bb:c4:5e:1c:1d:98:bf:d9:e4:61:15:e1:e6:
3f:25:06:54:2f:f7:d5:48:51:f5:98:55:e3:42:89:a3:47:8b:
b2:9f:be:09:0f:00:d4:0b:69:68:04:d4:ac:f1:45:f1:20:47:
41:18:cd:a5:7c:13:50:6d:c3:82:8c:40:62:48:af:81:a5:47:
c6:80:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:25 2024 by rpki-client on console-ams.rpki-client.org