Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.cer (raw, json)
Hash identifier: ZCTDE27d2vy+PevZjNX0cuyvNFRmzqozWOZbn5davq0=
Subject key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424900BF3D2708927E12A459F8EDB24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51321
IP: 185.132.120.0/22
IP: 2a06:df40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:90:0b:f3:d2:70:89:27:e1:2a:45:9f:8e:db:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:07:f9:7c:be:b6:47:bb:c0:1f:d3:90:41:
a2:09:b1:33:15:7a:f2:dc:63:5c:14:0c:f6:55:fa:
d6:ad:0a:1e:2d:a0:b9:b3:6c:56:c6:d9:91:bb:bb:
98:1d:e7:82:8c:da:cc:82:17:09:31:9f:ff:f8:39:
8d:37:ed:89:f6:44:28:a3:8e:19:2a:40:f2:da:3e:
59:56:5e:15:7b:56:2a:da:5d:55:29:27:85:67:8d:
99:24:4a:db:9a:da:84:76:48:bf:20:b0:57:35:91:
4c:92:c1:28:28:2f:49:81:76:96:b7:85:88:ee:76:
92:bd:4d:d0:d7:20:f1:16:f1:3b:06:67:26:6c:9d:
bb:1d:47:33:ed:1c:49:fc:f8:55:5b:ef:78:b2:c4:
28:21:ae:17:65:f3:74:28:b6:8c:cc:8e:f4:cf:c3:
1c:c5:6f:7f:db:09:67:50:7a:ed:cf:e3:32:7b:40:
9b:ec:08:32:a6:e5:8a:db:8a:09:5b:d3:8b:38:53:
9c:ea:55:0d:be:58:07:9f:f1:91:e7:d2:52:16:6a:
50:ea:52:c5:08:cc:f9:a9:aa:04:29:e9:9c:ef:1a:
b4:f2:6f:2e:98:df:5b:36:a3:ed:81:19:9c:a5:7f:
49:7a:17:0b:03:0e:cc:a3:9e:2d:d0:a7:72:8f:db:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.120.0/22
IPv6:
2a06:df40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51321
Signature Algorithm: sha256WithRSAEncryption
27:54:db:0a:c4:5a:70:b7:d0:0f:9d:27:87:12:d6:bd:03:6a:
c7:3c:52:a8:54:cb:0f:fc:1d:9a:20:d9:e5:b3:6b:31:c2:2b:
0d:49:63:f8:f9:b5:8d:4c:6b:4b:11:1e:79:a0:f8:65:82:77:
ca:83:1e:ac:3f:ac:a4:d2:72:a4:3f:bc:e2:05:b5:78:ca:c7:
23:e7:74:78:75:1f:60:2e:fa:c1:84:81:e0:04:54:c7:b8:5e:
d6:c5:6f:7f:75:ff:2b:d9:9f:ce:c0:e0:88:ac:d7:f1:02:3c:
93:63:e9:24:10:21:6e:f7:67:6f:bd:af:c5:9c:2c:f0:4b:97:
37:2a:45:1a:f5:c2:62:ab:3c:7e:e5:0c:77:a4:18:23:22:a4:
23:76:54:3f:95:4a:9d:b0:ba:68:85:42:a1:70:40:68:cf:28:
3e:e6:99:c5:b1:6f:fa:4e:46:4f:01:7a:0a:25:07:f5:af:06:
af:c8:26:33:df:47:57:2d:53:66:d5:5c:41:6e:72:a9:bb:e7:
df:bc:f0:80:41:7d:4b:28:52:60:84:d0:95:14:5a:37:fb:a7:
07:6d:0e:f8:91:d9:17:bd:89:99:72:ea:4f:b7:7e:85:11:26:
c6:de:0d:a0:60:bf:f2:95:89:f9:f5:4a:b0:01:bf:3a:7a:9d:
b6:2e:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:36:50 2024 by rpki-client on console-fra.rpki-client.org