Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
File: saC9QgWKA5D0Y8_rexfiHeC3VQA.cer (raw, json)
Hash identifier: BYSPw3HdRnj+fYHqvrDv5aB+hV8eTnb75/9rmb4Y4Lo=
Subject key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3495BBE98384DEF346473ACB6FD2174
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41729
IP: 45.158.92.0/22
IP: 88.151.160.0/21
IP: 89.248.0.0/20
IP: 91.184.128.0/19
IP: 195.177.96.0/23
IP: 195.177.99.0/24
IP: 2a00:1a78::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5b:be:98:38:4d:ef:34:64:73:ac:b6:fd:21:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:8a:f5:92:20:9c:f1:4f:1d:e4:9f:dc:3c:
49:f8:bf:f1:b3:ec:aa:ff:c9:7d:5d:fa:13:bc:ea:
7c:36:90:6c:90:32:39:6a:df:33:88:48:8d:48:2e:
b6:c2:ad:4d:1a:cf:73:8a:bf:af:79:38:2d:0f:46:
ff:79:d7:a2:16:4f:33:d9:dd:ed:e6:cd:00:59:53:
ac:42:a4:2a:cb:9f:1b:11:e5:51:c9:25:69:ac:c5:
bb:c5:84:46:eb:ca:f2:46:b5:60:80:68:16:c0:5f:
e5:9a:0e:b7:ea:75:47:fa:34:dd:ae:fd:8b:4f:d1:
97:de:0f:44:a6:7c:62:a6:37:0f:1e:6b:0b:38:20:
87:a1:38:4d:d7:99:d9:1f:57:59:96:ef:ca:28:88:
1c:d7:2a:a3:04:87:10:ef:9f:af:3f:db:d0:98:cf:
f6:3d:2d:70:b2:98:46:f6:f2:b4:11:35:79:2d:b7:
57:82:87:96:87:ae:a5:4b:71:36:5f:be:3f:6c:b1:
26:7f:9c:ec:33:8c:07:4d:19:d4:8b:ec:fe:d6:f3:
ec:0b:ee:c9:bc:0a:06:80:44:29:01:e0:09:f7:5f:
6b:5f:3d:e5:14:89:70:c5:87:9e:d6:2a:31:3d:e3:
af:78:57:b3:4a:9f:d3:09:d6:8b:72:d4:db:c3:15:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.92.0/22
88.151.160.0/21
89.248.0.0/20
91.184.128.0/19
195.177.96.0/23
195.177.99.0/24
IPv6:
2a00:1a78::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41729
Signature Algorithm: sha256WithRSAEncryption
a9:0a:6e:44:56:97:30:af:6e:4d:55:8b:70:e1:f6:68:bc:30:
ca:2b:5f:60:00:84:69:84:50:13:68:6a:3d:2a:87:93:ff:f1:
75:e7:37:f8:bd:f5:ca:d2:05:a5:bc:d4:a9:93:d4:e0:9e:e3:
75:60:f2:2b:2c:74:e4:80:d4:05:f8:9e:7d:d6:f3:78:f2:dc:
62:de:3b:ac:28:b0:7d:53:ea:c2:a7:ba:bb:98:24:a7:5c:a8:
97:9e:5d:90:d2:82:a5:24:b1:0a:42:84:88:05:ea:3a:57:7f:
a4:b2:dc:17:fd:1f:3e:68:e6:b7:76:6c:14:f5:0b:dd:1a:cb:
3b:43:30:6f:96:df:51:50:46:c9:de:63:59:a4:d4:a7:05:b5:
8e:67:9f:8d:1c:3b:b2:65:f6:37:35:03:79:f7:33:82:1a:bc:
38:9e:f5:69:a9:38:e2:c4:41:24:b7:a7:70:97:fb:ed:83:3f:
95:20:05:ca:5d:c1:f2:49:87:ec:f0:05:68:61:27:2c:da:31:
88:fe:db:9a:b2:f7:18:3f:b8:58:62:f7:18:0b:18:3f:26:aa:
d6:4d:b0:77:a8:02:30:b3:96:7d:79:f7:f0:0f:33:cb:22:19:
8e:63:82:3f:01:a6:d1:c2:16:8c:e5:44:b5:38:1f:51:19:91:
84:ba:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:16:44 2024 by rpki-client on console-ams.rpki-client.org