Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
File: DwQeIIaCRVpnlCzipkhYygcEfos.cer (raw, json)
Hash identifier: YNSn1OzMvMm08fRZIRdFZzMi3OWHg/+f3BoqSjZAaCU=
Subject key identifier: 0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D93944906177AF4CC75E87B9D4065
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200412
IP: 185.107.216.0/22
IP: 2a0a:b140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:93:94:49:06:17:7a:f4:cc:75:e8:7b:9d:40:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f041e208682455a67942ce2a64858ca07047e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:3f:c3:30:ca:a0:cf:b4:fe:1a:e0:04:11:
66:7c:e2:ff:8f:d1:0f:92:94:b7:25:27:30:48:73:
dc:fc:cd:44:1a:a4:0f:87:b4:e8:28:46:66:fe:c9:
36:70:ea:b0:f6:4e:28:89:e6:93:f4:5f:45:b7:eb:
9e:ef:7b:f4:0b:31:f3:11:bd:1f:42:03:64:6a:a3:
3a:9b:dd:39:80:4a:d6:3d:83:25:93:43:4d:92:bc:
0b:97:f4:8e:f1:2a:6a:eb:b8:8b:2b:59:c7:7f:45:
f0:c4:64:3a:c8:e9:84:e9:52:6d:bf:3e:13:00:1a:
16:b1:4d:5b:fe:43:aa:20:3d:bf:ac:a0:04:7f:b9:
5d:4e:f8:0d:f5:09:30:c1:57:d7:2f:b4:cd:d4:52:
c2:b0:b9:3c:c6:bc:b3:9d:b9:9a:d6:fe:e2:03:22:
2d:a7:f8:47:5e:4b:16:5d:e0:bc:bd:e9:13:00:e9:
97:52:a6:b8:6e:a9:ba:58:17:a9:e5:a9:2b:a3:50:
3c:b3:7a:0c:f5:db:93:df:07:d4:4d:a7:dd:6c:21:
70:11:6a:23:6c:6d:b9:0e:9d:12:19:63:b7:d3:43:
04:49:3d:de:9f:5b:58:ac:08:17:5b:3a:60:c4:a5:
ed:c3:be:b3:06:4b:50:90:0a:bb:a4:53:c1:35:dd:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.216.0/22
IPv6:
2a0a:b140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200412
Signature Algorithm: sha256WithRSAEncryption
12:80:e8:b0:2c:b9:f8:0e:ac:bf:9b:ea:f0:3a:d9:67:15:1e:
ce:c8:ca:00:dd:46:ad:a7:ab:91:9d:3e:57:a3:7b:3e:3f:9c:
bd:8b:fd:02:67:40:dc:a4:d8:d2:c8:b8:10:7b:1b:fc:db:9a:
4b:02:93:f3:3f:a3:09:b3:75:21:7b:d8:a8:ac:e0:00:de:77:
db:04:44:00:e7:87:3d:04:cd:ce:2f:89:41:be:54:67:e3:5e:
d2:87:b2:32:4a:38:fd:81:8d:57:40:91:3d:b8:17:78:af:22:
64:ab:ef:22:c8:48:33:e6:52:86:f0:ff:59:4e:0b:92:af:f6:
11:f7:af:aa:da:b2:f7:27:c4:82:54:09:cd:67:06:ec:c8:56:
cc:ce:06:39:fa:3a:bf:ba:20:11:0a:30:db:b5:5b:9c:c4:bc:
20:61:a1:ab:7d:e4:e4:73:67:b2:fc:b3:4d:6f:a2:2a:9a:ee:
e0:7d:5f:63:cf:30:69:dc:c8:76:f3:55:8a:8c:e1:6b:56:24:
27:38:d2:e2:a1:c7:b6:52:94:ba:23:3d:60:fe:d5:cb:11:b2:
2e:6a:af:38:3c:42:b9:fd:3b:0e:ec:51:5d:4f:24:3a:1b:44:
77:1e:5f:84:d7:82:f1:c4:b5:67:78:5d:34:1d:09:38:e1:50:
36:fc:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:13:38 2024 by rpki-client on console-fra.rpki-client.org