Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.cer (raw, json)
Hash identifier: TodHFVTxriCGrAOyiIffB01wKYYeSu4HVdV2/aS6n3U=
Subject key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D7BF4FCEC9C4CD6980613081CB1AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25444
IP: 195.20.126.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7b:f4:fc:ec:9c:4c:d6:98:06:13:08:1c:b1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:a0:1b:a3:b0:df:c1:00:7c:2d:17:27:d7:
fc:5f:fa:0b:da:fc:5a:7d:c1:99:1b:ec:a0:6a:55:
d0:cc:a5:02:d3:b3:83:5d:f0:36:8f:65:00:ce:28:
d8:27:a5:90:90:78:77:b0:ac:de:c2:5b:32:f7:31:
54:b1:81:d3:0b:1f:9f:e0:43:54:ca:0b:7d:e0:93:
73:96:a6:67:dd:16:40:57:a4:2d:72:ad:05:28:39:
98:8b:f0:d7:bf:33:99:e7:50:b0:f2:47:eb:1d:85:
45:d6:74:6f:7a:71:5c:b0:31:a8:c0:22:42:8d:4c:
2e:02:b7:c8:0e:f1:0b:67:65:ee:83:9e:ab:6f:f4:
51:60:46:2c:7e:64:fe:0c:09:79:84:56:3e:66:e4:
37:ce:4e:e3:ea:bc:be:64:99:81:27:6b:a9:b5:88:
7e:e8:16:3b:c7:a7:8b:64:ec:0a:32:ee:67:88:74:
a2:c8:e2:b7:75:a2:5d:6b:cd:69:f1:1d:75:e8:6a:
e6:ff:c5:d7:4c:75:11:f1:39:35:ca:96:4b:d0:84:
58:41:18:af:03:0a:d8:62:1d:8f:7e:31:11:5f:62:
cd:49:75:0f:03:fd:39:ba:cc:9e:21:4a:7f:c3:4d:
93:60:b3:c6:a9:05:7b:2a:41:7b:6a:13:84:f4:82:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.126.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25444
Signature Algorithm: sha256WithRSAEncryption
18:f0:d2:b0:f0:40:a1:f9:dc:70:15:ab:fc:e5:7b:ac:7f:c0:
c3:dc:dd:92:24:e9:45:2f:1f:83:8b:a4:af:7e:0d:1e:ca:68:
15:d2:4f:ed:eb:0a:fa:05:da:9d:40:5b:c8:0a:2d:2d:40:d8:
81:91:e5:f7:a7:32:2f:04:ce:b8:68:50:eb:bf:92:8e:b0:82:
b4:6c:e7:5c:4f:83:f6:78:cc:25:0f:be:e4:a2:f9:3d:63:0d:
b3:5c:27:88:75:b4:0d:b5:10:89:26:3c:34:f5:20:30:b5:db:
4c:50:04:14:7b:15:46:25:c3:c9:18:34:42:64:cb:b4:44:66:
fb:90:8b:40:1a:52:37:f6:63:8a:53:59:f4:54:d9:af:26:66:
ac:5b:33:66:a1:5a:46:3e:de:9b:86:2b:08:ed:a2:65:f5:c9:
eb:ea:a5:c2:1a:b4:7b:42:01:68:e0:b8:55:27:8c:d6:b1:f2:
42:13:da:82:9c:57:1e:9b:65:25:b1:3e:98:21:24:e2:27:9a:
03:f8:45:a5:a2:29:63:a9:bc:9a:65:af:1e:a2:3b:fd:53:12:
ea:d5:4c:78:7e:78:64:68:b2:c9:b5:4c:01:85:03:8f:36:d1:
7b:d5:40:3b:8a:dd:3e:5e:8a:b1:ea:65:4e:88:11:fe:5f:89:
e6:48:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:05:16 2024 by rpki-client on console-ams.rpki-client.org