Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer (raw, json)
Hash identifier: IrKjQgGNVHXzT3q9U28qiNe4yPps1NsvmGEAge0i8nQ=
Subject key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEF035F0844C2E17673E8978CAB8A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56764
AS: 201284
IP: 185.79.216.0/22
IP: 2a05:75c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f0:35:f0:84:4c:2e:17:67:3e:89:78:ca:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:d6:ec:55:be:a5:60:e2:87:33:68:32:69:
29:40:af:99:a0:98:e8:3b:f6:fa:f9:18:46:79:85:
f1:b3:63:a5:0c:9b:81:d5:56:91:6b:f6:da:e0:6b:
cc:60:74:d3:3d:1e:66:2b:3b:a1:df:50:0e:d4:c7:
49:cc:89:11:67:6d:91:9f:44:58:f1:69:c7:c9:32:
ce:0a:c2:4a:c9:74:19:16:b0:ed:b0:55:b0:db:e4:
92:2a:1f:e3:b7:03:3b:42:f2:8a:a5:be:7e:72:1d:
19:05:8f:96:85:bc:5c:d1:8d:86:26:ef:a5:d3:4d:
0f:55:50:14:7c:84:70:b7:3d:3e:4b:90:52:28:0c:
eb:ef:d3:97:ec:a7:8f:3b:69:3d:9b:ac:d9:29:68:
3c:1e:8a:30:95:77:40:5b:56:8b:76:5e:0c:03:37:
77:8e:e5:27:b3:a8:13:60:c9:68:2c:5e:09:e6:84:
a3:4b:92:e2:28:38:42:e5:db:8d:24:97:8c:97:d6:
fb:fe:28:fd:dd:b4:f9:41:0b:57:eb:d8:78:53:7a:
a4:3f:d6:12:4e:12:0d:cd:b9:3b:97:2f:93:05:39:
58:6f:66:25:af:b6:2f:93:87:fc:d1:8d:5f:de:84:
ce:4f:53:50:03:4a:a7:b9:26:48:a0:c3:a7:e8:49:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.216.0/22
IPv6:
2a05:75c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56764
201284
Signature Algorithm: sha256WithRSAEncryption
8c:54:06:3e:d9:c0:3f:36:ab:4b:73:c2:61:b0:81:be:33:fb:
8b:41:45:2a:af:b7:26:e5:27:17:77:ab:51:0b:34:16:e9:fd:
3a:61:2a:5d:98:5b:f2:d4:73:40:89:29:c5:2b:d8:a8:ea:e4:
1b:0f:e5:01:79:07:10:ab:a0:89:e2:4e:18:d9:69:5d:2d:87:
ab:58:01:ae:c2:d1:66:9e:dc:b6:c7:f1:af:fd:bd:49:d0:02:
c2:e5:4f:76:cf:62:df:36:a7:b6:f9:6b:b9:72:2b:f3:68:43:
ba:97:ac:32:6d:5b:6c:c4:7b:aa:2d:a7:cc:bb:44:83:ae:88:
26:d1:99:1f:8d:e5:d9:1e:3e:61:cb:1e:b7:15:35:95:df:0f:
95:d5:ce:43:3f:fa:7a:fa:34:51:49:42:9e:0c:68:7f:42:8b:
3e:c9:95:d7:6a:ff:29:54:91:d3:1c:b0:45:63:19:6b:e6:dd:
76:9e:61:3e:fb:87:1d:5f:06:bd:43:c2:08:2d:b8:0e:d7:61:
cc:84:47:c3:bd:06:b1:4c:b3:a3:ba:fd:17:db:c5:f7:4c:81:
a3:f7:d0:52:d6:22:a7:c2:4e:da:7d:4e:c9:45:5f:e3:92:fe:
51:47:80:37:de:09:12:7d:59:cd:1e:9e:88:eb:1f:90:86:64:
1a:71:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:11:44 2024 by rpki-client on console-fra.rpki-client.org