Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
File: pxJZNzLf_jheZ26QVodyMGza63I.cer (raw, json)
Hash identifier: ukZyQw/Yt4XIBe3A4BSqTiV1MRP4r+SKu1j6Guazhqk=
Subject key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEAB9FB032C4564436B3E70E484EC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213072
IP: 194.60.80.0/24
IP: 2001:67c:c5c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ab:9f:b0:32:c4:56:44:36:b3:e7:0e:48:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a712593732dffe385e676e90568772306cdaeb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:01:13:98:8a:6c:58:03:64:96:d1:78:a6:
1d:7f:b3:35:ff:e4:10:b3:b5:b5:00:77:27:ed:fb:
b0:d3:5d:f9:da:17:c6:f8:ba:ba:43:12:a4:59:dc:
c8:19:f9:c2:ab:e4:d9:5e:d4:db:ad:04:12:e6:e2:
bf:37:0f:8c:11:1c:d6:d1:38:66:3c:66:15:50:71:
a1:e3:88:15:36:9b:52:b4:1b:d3:ba:05:c8:be:47:
2d:13:21:56:1a:19:9f:c5:6c:59:cf:53:76:50:d1:
c5:da:d8:1a:df:d1:7b:4d:e6:90:e7:30:7e:00:d0:
54:4e:ba:aa:b5:27:32:d0:eb:0a:16:f2:ee:56:ab:
d0:93:1c:e5:41:53:77:3c:80:3c:6c:8d:b2:be:7b:
95:21:5d:de:90:52:d7:1a:57:fa:21:52:86:cd:06:
32:1e:57:ee:77:08:9a:41:72:67:f1:4b:52:e9:6c:
e6:11:fa:77:fe:c2:00:bc:00:48:5e:a4:82:ca:08:
b0:af:98:32:8a:2f:5c:ec:ad:44:fe:38:9e:db:c7:
8e:94:ff:6e:30:d3:a9:ef:92:df:b0:fb:28:a1:92:
37:55:bf:10:11:b6:8a:06:85:a1:4b:ba:1f:2e:cc:
12:4b:1a:24:64:bc:c6:b1:5f:c3:f2:70:ca:92:6c:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.80.0/24
IPv6:
2001:67c:c5c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213072
Signature Algorithm: sha256WithRSAEncryption
2e:0a:14:34:a9:35:76:0c:7a:f4:77:65:3a:c7:99:3d:37:bf:
aa:3b:c5:52:51:62:bb:29:3e:ec:6a:32:e5:a7:a7:46:8f:40:
eb:69:79:87:45:7a:8e:39:26:7c:56:bf:62:51:11:1d:80:b4:
37:cc:0b:7e:1c:42:3a:8e:6f:6f:2e:cd:75:42:a2:e3:0d:9a:
6a:45:24:91:a4:0a:aa:fd:5e:28:66:db:61:a6:f5:d2:73:e8:
70:31:07:0f:f6:33:dc:48:b9:35:ec:aa:3b:b0:a3:3c:8b:de:
3f:54:c6:55:79:b5:42:36:41:aa:bb:ac:1c:6c:88:23:2a:2c:
ca:55:23:c6:4d:6c:a1:9d:fb:51:b2:d1:ae:b7:30:af:c8:2a:
fe:d4:65:1e:45:65:70:9c:0f:db:e7:98:80:8d:f9:ff:6e:df:
12:14:b2:66:cc:0d:ba:c0:78:e7:94:7b:25:0b:c6:41:c5:71:
da:49:97:f9:2e:da:35:29:51:ed:21:16:ae:7c:23:7a:87:cd:
e8:ff:29:c3:03:07:ba:dd:29:ea:a5:8c:54:32:3b:28:cd:a7:
ab:f7:4c:63:c3:50:f4:11:67:b3:9a:64:34:26:67:de:63:74:
3a:aa:16:e4:f5:07:2c:da:a6:b3:6d:8a:7f:de:9d:52:fd:40:
6a:c5:ee:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:30:32 2024 by rpki-client on console-ams.rpki-client.org