Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer (raw, json)
Hash identifier: Kg5T5/kr+zGjJL8g4ow8hWO4u7IAGvWA0i6GVoPz14w=
Subject key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CD41505BA6915557B75A2E12F2A06D8D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Jan 2024 10:46:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35416
IP: 193.47.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:15:05:ba:69:15:55:7b:75:a2:e1:2f:2a:06:d8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 4 10:46:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:e6:c5:fa:ac:a9:38:46:60:6a:61:c6:06:
5f:91:44:f9:7d:60:41:98:40:b1:3e:72:19:75:af:
c4:0c:ab:ea:e6:42:63:db:2c:d2:a6:62:cd:52:f4:
fd:5c:bd:ab:92:1e:85:93:8c:a4:10:82:af:f9:00:
46:82:e1:a1:36:ce:08:21:3b:27:17:50:ef:09:70:
f6:62:3d:2a:f4:e7:78:3a:7d:5f:d8:15:6e:b1:e3:
9f:94:91:fb:86:ec:ce:f8:fc:10:44:f5:fc:fe:8e:
36:c1:6f:2e:fe:9b:b4:9f:b9:da:ea:3f:d1:44:b0:
a1:fc:49:18:a2:df:f4:28:f5:56:8a:7f:0a:4f:44:
69:83:68:c0:38:c6:3b:3f:5c:29:4b:59:0e:f4:48:
61:4c:49:15:ab:c5:67:cc:16:90:94:81:9d:45:3e:
7b:c0:35:01:46:04:e5:d7:be:d8:49:aa:e0:e7:eb:
5f:da:b7:2d:04:36:99:80:70:ae:78:c6:7e:d3:23:
52:91:90:e4:4b:9a:41:15:f1:12:4d:e4:2b:ee:90:
cf:1a:20:95:07:a8:52:f8:3f:e6:2b:d8:db:31:c0:
47:d3:6a:af:9d:d2:bb:f3:cb:0d:00:79:a6:6e:a4:
a5:5b:9a:9d:9c:c0:22:80:f1:3b:7e:69:c2:2f:52:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.246.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35416
Signature Algorithm: sha256WithRSAEncryption
5b:d4:67:f2:58:13:7a:99:27:26:bf:ec:33:e9:4f:af:3d:1f:
15:56:01:f9:88:32:00:63:28:02:a5:19:27:11:b1:f7:de:11:
4f:43:ee:60:66:15:1e:73:db:46:ea:e3:35:eb:8a:64:f2:9a:
0b:d3:28:08:c5:07:80:25:5e:e1:53:7d:7d:2a:30:2f:58:00:
1a:60:b9:ea:07:76:c8:bd:48:f0:94:18:c5:ee:ee:e6:7c:c1:
82:1f:a4:bb:33:28:89:58:7f:de:5e:c5:09:e1:c2:a0:83:7d:
7f:13:9c:57:19:26:8f:fa:e1:eb:5d:ce:97:64:a3:5a:1c:a9:
c5:21:93:fb:1b:4e:cb:7e:5d:5f:96:ce:37:db:4a:b4:8a:ba:
81:da:65:42:f7:cc:59:ce:47:21:38:bb:f3:94:dc:0b:ff:43:
21:7c:1e:01:df:76:a3:07:23:43:4a:ff:74:e1:a0:89:b5:2a:
d6:19:c1:cd:95:de:5c:12:a0:8f:8c:60:74:fc:32:70:41:e4:
8b:92:50:d6:fd:4e:16:70:ca:b4:1e:1c:3a:3b:c9:c8:38:c1:
00:a1:ea:79:eb:57:a8:ad:9c:23:46:a7:12:6e:e0:ca:fc:c8:
52:b6:d6:0a:41:ca:23:86:47:75:47:37:0e:e8:63:eb:b0:8a:
c4:1d:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:15:53 2024 by rpki-client on console-ams.rpki-client.org