Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.cer (raw, json)
Hash identifier: wca8Eds02xrGCk7taLuYj0PGPd/iN56UqaiPizfF/9c=
Subject key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9420B90E16595F78E1AA48AD9C025
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200804
IP: 185.94.112.0/22
IP: 2a04:c280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:42:0b:90:e1:65:95:f7:8e:1a:a4:8a:d9:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:f9:35:b0:c3:1c:ba:16:fa:60:0a:88:7a:
73:21:d1:63:65:c2:99:5d:e6:08:da:a4:c6:09:17:
21:92:46:7e:ea:8a:b7:b5:c4:de:56:bc:58:a9:b7:
97:7c:b3:23:d8:dd:05:07:ae:96:8f:09:b8:f1:ab:
b5:0f:6e:e3:70:ea:a4:d8:2a:e4:d2:a6:84:f5:12:
f6:2f:78:d6:ee:0b:f8:9c:c7:34:23:a6:a7:63:b9:
fb:ff:8a:a7:a2:58:6e:8a:bc:e6:33:e9:72:3a:11:
a2:38:9b:03:74:52:10:41:a0:60:31:ec:7d:75:8d:
25:64:53:33:60:1b:ec:a6:ac:d9:46:d5:ba:fa:80:
bf:fb:8e:60:52:d5:22:82:b2:51:11:86:f4:e5:d9:
31:42:ae:7f:10:17:69:b5:ed:bf:8a:1f:87:b7:76:
78:e4:f6:67:41:ea:c9:bf:2a:a8:c7:cb:82:41:20:
c3:45:7a:c2:16:9e:2d:90:ae:b9:61:5f:97:f8:e8:
9b:e6:6b:84:70:b0:b6:4e:5b:1b:9b:c6:e5:7f:52:
4e:34:e8:54:ac:6d:5c:17:dc:9f:b0:a7:af:74:a5:
d0:96:78:ba:69:ec:be:1a:17:80:b8:4e:86:6b:68:
bb:52:6e:57:ea:90:43:b0:15:bd:08:ba:de:12:98:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.112.0/22
IPv6:
2a04:c280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200804
Signature Algorithm: sha256WithRSAEncryption
5b:70:29:9d:73:6b:16:39:46:4a:88:6f:7e:1b:ad:46:68:30:
0f:8f:ba:ad:d2:d9:99:48:c3:bc:11:40:49:f6:5b:9f:4f:54:
5a:35:21:dd:3d:bb:82:b3:49:5e:50:7a:ab:c1:02:fe:a1:c5:
4f:a2:33:ef:a8:8a:50:8c:4c:47:23:9b:c9:d6:d8:27:a9:06:
3e:46:d6:80:5b:72:cd:17:fc:c9:4b:d2:42:71:da:30:92:8a:
34:cb:f1:c3:f0:b5:9d:11:c8:b8:90:61:ec:46:1b:f3:19:71:
65:5a:57:6f:fb:7f:63:99:6c:a9:09:26:f2:ca:ed:a7:9a:e4:
7d:85:71:87:c2:e1:1c:33:29:ce:31:16:f1:c8:9e:78:07:48:
7d:45:a0:62:ce:83:31:09:b2:cc:3b:48:ed:f0:93:fc:79:f4:
4c:9d:62:67:5f:c3:3e:51:ee:58:49:03:06:8f:c0:80:7b:d6:
81:6d:5a:53:80:7a:90:bb:02:ed:7c:77:c2:88:62:71:3f:2c:
48:a8:4f:20:58:81:78:b7:51:e8:56:c2:b6:dc:8e:db:f7:6b:
02:cc:ff:a4:79:f2:7b:a3:67:aa:40:8d:43:77:35:24:d4:7e:
67:63:85:6b:4e:c8:dc:42:58:ff:b1:c2:df:bf:66:a7:3f:06:
e9:c6:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:19:01 2024 by rpki-client on console-fra.rpki-client.org