Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
File: ERhPtlA6dgZX-QJw4naj_LULjo8.cer (raw, json)
Hash identifier: w26IVHRBsRG7Hr1YldqrEfIMEaeVw5C3LpFrNzHOeJ8=
Subject key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEF13AD0A126B69A3EBEFE44658992
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12891
IP: 193.110.208.0/21
IP: 2001:67c:5e0::/48
IP: 2001:67c:11b8::/48
IP: 2001:67c:11ec::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f1:3a:d0:a1:26:b6:9a:3e:be:fe:44:65:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:e2:81:91:7f:84:34:46:bb:45:14:50:e1:
dc:6e:0b:d8:51:ba:d5:7a:0d:d9:48:9f:65:f1:55:
29:dc:36:7e:3f:54:b4:61:1a:7f:1e:49:67:e3:38:
27:fe:82:83:c2:f8:a5:fb:39:6c:91:1e:29:ea:d6:
2b:a1:20:50:96:7a:0e:3b:12:be:ed:89:12:0c:60:
c7:e7:c2:72:e4:9f:38:e7:4c:30:44:f6:77:15:3e:
8d:29:a6:f7:64:29:86:ef:47:b6:13:be:d1:3e:ee:
50:f3:49:d6:42:48:64:d0:6b:c6:d7:a5:4f:8b:ab:
28:a2:6c:b5:36:47:f1:90:53:46:7a:63:aa:d3:62:
11:e8:7b:64:7e:eb:5c:db:99:22:5f:00:be:f5:7d:
46:ce:ec:5c:de:92:9d:17:61:6c:ae:70:32:74:24:
3c:aa:a5:59:ba:e0:c6:2e:00:a9:5a:62:bc:e2:03:
09:c8:5b:e2:66:94:83:d4:61:6d:8d:9b:f9:7b:25:
ba:11:b4:03:f8:8f:cf:30:fa:6a:ed:f9:5b:f4:2b:
40:30:5c:1a:b9:dd:54:0a:97:7f:84:09:11:56:ea:
15:12:eb:48:d3:d5:30:4d:df:ea:d4:b0:7d:73:f6:
74:19:08:cc:ed:39:4f:f9:1f:1b:43:d2:b1:09:7a:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.208.0/21
IPv6:
2001:67c:5e0::/48
2001:67c:11b8::/48
2001:67c:11ec::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12891
Signature Algorithm: sha256WithRSAEncryption
9e:af:01:cc:8a:20:b6:13:14:44:cd:f6:3e:ea:c6:9d:06:bc:
49:0f:05:c1:8e:89:d0:d3:36:6d:f6:9b:cd:56:15:36:dc:92:
7c:31:6d:f0:68:18:56:49:9d:7c:bf:09:b3:13:18:dc:b3:cf:
94:e7:c4:30:54:de:18:54:cf:0c:ae:f0:bb:cc:75:24:ad:7d:
eb:35:05:44:d0:d0:bf:84:90:54:82:77:b6:30:5a:00:f8:cf:
28:c7:f8:c4:f7:16:fc:ce:bc:75:0e:b3:45:5d:c8:2d:c7:9a:
c9:ae:f6:eb:e5:31:eb:42:7c:a5:07:4b:c7:f8:9e:7d:43:6b:
1c:a6:4f:ea:85:f6:b7:44:9b:af:b4:55:34:a5:38:3d:04:f7:
0b:78:36:eb:6f:e9:75:1d:18:1e:eb:7e:b2:a2:2c:e6:f2:88:
83:a1:d8:df:59:d1:4d:ed:40:09:70:e3:6c:1d:93:c3:39:c9:
23:a1:e8:40:3f:5f:e0:7e:3c:a8:c6:a7:5c:c1:f1:14:75:ce:
ec:0c:7a:ed:c5:a2:62:45:4f:4a:69:2a:26:e3:c9:d4:1f:24:
6b:df:e8:e3:94:f9:f9:ed:f3:ab:e9:9c:ec:d7:4f:82:99:4e:
ec:06:7a:c2:9d:39:e2:7d:34:a3:7a:ce:d7:14:8f:30:00:68:
f1:56:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:19:08 2024 by rpki-client on console-ams.rpki-client.org