Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.cer (raw, json)
Hash identifier: On8Qwvyx407xv4CvIw5d5Ml2TmIzNz91pvl9WsaPkBI=
Subject key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC795511E5A419AF30D3BDE00D30FF5C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60654
IP: 195.5.189.0/24
IP: 2a10:e940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:51:1e:5a:41:9a:f3:0d:3b:de:00:d3:0f:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:1b:61:63:67:79:12:41:71:2a:0d:22:ba:
08:23:8a:e1:7c:36:3a:c8:8f:a7:64:c3:d9:0f:8e:
50:fb:98:64:f2:39:95:29:9a:b6:8a:56:bd:1d:9d:
e3:00:6c:5c:fb:f8:6e:32:24:b3:7c:c2:d2:cf:22:
5b:45:b3:4e:05:6a:37:d7:07:9c:da:9b:ee:6f:ce:
7e:20:2f:76:d2:3f:91:d3:a9:87:65:d7:46:2e:87:
ca:3e:83:71:da:78:3b:a5:c3:b5:8e:64:12:e7:a9:
6f:5d:d6:52:8c:22:14:25:bf:c1:1e:af:3c:e5:4e:
84:db:f5:e3:4e:b5:dc:6a:9c:7c:76:4f:a8:9f:ad:
60:2d:e2:d1:33:0b:1d:4b:af:b6:71:e9:f8:f6:6b:
94:72:7e:82:bc:7c:e7:08:66:9a:ee:13:d8:75:bc:
db:65:ed:3a:b8:b0:bb:15:31:42:95:b8:65:2c:77:
54:8f:9c:8f:4c:f8:fb:80:b3:f4:09:d3:93:0e:d0:
3b:25:13:39:02:af:26:65:cb:22:b6:cf:aa:56:85:
33:58:58:8d:02:e4:c3:30:3e:05:9f:78:58:f2:51:
47:07:d0:9b:e1:8e:6f:01:01:53:d6:1a:a7:76:37:
4a:3a:20:4f:6a:df:c6:73:40:33:e6:89:fa:99:6f:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.189.0/24
IPv6:
2a10:e940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60654
Signature Algorithm: sha256WithRSAEncryption
37:6e:c5:e4:fa:e3:d0:6f:a1:3c:02:1c:ce:0e:ef:48:7b:71:
f5:62:e5:40:16:da:20:7a:82:41:ee:49:ce:42:a6:1a:c9:56:
41:47:4f:7b:2b:f6:73:13:59:bc:4f:60:2f:6d:aa:62:20:fe:
e9:7a:b4:91:22:f9:8d:ea:6c:2d:0d:36:06:60:7c:c3:89:44:
f6:27:36:5a:08:fd:f8:6d:fd:bc:a2:e6:03:70:6e:e7:9e:06:
17:ef:d1:a5:68:60:7c:c5:54:f5:b1:11:79:50:0d:d2:80:47:
0f:f1:96:01:1c:0b:4e:fa:f7:9c:81:c8:6d:78:9a:4d:e8:f4:
3e:ed:ff:28:ba:22:f6:2a:2d:fc:d3:76:92:69:12:fd:62:7d:
7a:1b:a1:6b:e9:b8:17:ec:a6:d8:32:21:75:35:2d:b9:2a:35:
80:f6:5e:65:1d:36:98:1b:1e:e7:75:53:50:cd:e5:93:96:3d:
ae:3c:f3:f4:45:81:0c:ad:ec:57:99:d5:6b:1e:4c:f3:9a:5e:
bd:da:4c:48:ff:72:86:5c:f1:5f:a5:87:ec:02:2e:7c:2a:3c:
3b:7a:f2:39:53:fa:7e:a5:2f:ac:1d:9c:9a:5f:a9:aa:8f:66:
67:2a:89:5a:bd:0d:2e:bc:53:be:64:92:7c:db:69:e0:5f:42:
2e:d2:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:12:42 2024 by rpki-client on console-ams.rpki-client.org