Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer (raw, json)
Hash identifier: cJhZ3+1ft970cK2c49OJ2J8GuqATHLS+C5HmCzeTSiE=
Subject key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E56EE8DCA39928C8495F648211E52
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56876
IP: 94.250.192.0/19
IP: 176.57.128.0/18
IP: 185.137.120.0/22
IP: 193.192.58.0/23
IP: 2a00:e440::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:56:ee:8d:ca:39:92:8c:84:95:f6:48:21:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:4d:4a:9f:4b:32:72:88:9f:87:37:06:99:
9e:ee:af:55:82:c9:e4:9f:62:17:69:b9:4b:53:11:
5f:63:01:9d:e1:ea:bf:f6:7d:3e:ca:2a:c3:16:43:
d5:65:be:04:0c:27:21:88:51:d5:9c:5e:de:8d:0e:
50:a1:aa:b6:79:e2:2c:6e:99:6a:7d:92:89:bb:bc:
e9:e4:dc:12:e6:95:a1:e4:69:b1:d2:08:e2:d5:47:
87:47:75:a2:d6:bf:92:aa:87:ad:0f:4b:6c:a7:8b:
47:54:12:c4:cf:da:59:c3:a2:2c:65:1f:03:46:ae:
8c:b7:0e:9e:83:aa:fc:5f:34:a1:65:79:56:1d:56:
14:95:90:0b:7a:3f:99:83:84:fc:3c:5f:4e:00:57:
9e:06:7d:e7:2c:d8:3a:c2:82:34:f7:b1:e9:88:dc:
ab:96:ff:74:41:ff:98:17:a5:1f:5b:87:c4:d1:4f:
69:b5:5f:1c:69:9f:b3:b9:95:d6:ed:5e:ef:f8:75:
b8:eb:c1:57:f4:54:41:c3:29:b5:0b:9f:39:f9:7d:
b2:bf:f6:a1:78:b0:84:fe:a4:23:a0:70:f2:25:3d:
34:52:8d:02:47:1b:15:40:85:e0:6a:54:ff:da:d8:
2d:7c:72:ab:8a:66:5d:66:07:cb:93:0a:56:40:8c:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.192.0/19
176.57.128.0/18
185.137.120.0/22
193.192.58.0/23
IPv6:
2a00:e440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56876
Signature Algorithm: sha256WithRSAEncryption
77:3b:cc:15:d9:76:ee:1f:22:5c:ca:0b:49:07:a4:89:4b:02:
bd:a0:98:12:8f:1d:95:0b:bd:39:04:f6:c9:de:a8:a6:28:2c:
3a:b9:12:48:52:73:db:93:49:57:16:61:45:b9:59:23:49:ce:
04:14:9f:7a:39:6b:76:a2:d8:d3:f5:db:a4:80:ec:d6:55:5d:
fb:25:c7:cb:d1:67:2a:f4:3a:c0:63:1e:27:d7:24:6f:35:c9:
f9:b5:1b:2e:ee:37:80:1b:46:f2:c2:31:d1:0d:de:c1:f1:99:
3f:47:de:16:bf:39:43:15:e2:87:b0:ec:94:03:f0:e6:36:64:
b7:39:dc:29:61:61:8e:b3:45:16:fd:c3:73:aa:7e:4c:2b:d2:
46:62:f6:8b:21:b7:e8:f6:1f:3b:83:e7:78:ca:7c:91:e5:5f:
5d:23:93:4d:7d:d2:c1:52:f5:26:ad:30:a0:83:5e:d8:12:f4:
21:ba:6c:af:d3:2e:7b:e2:cb:5f:02:06:ac:e0:ed:5b:cc:d4:
6f:e6:e3:19:d3:d7:c9:c4:11:b6:16:72:07:49:2d:ab:a5:87:
95:38:c7:fc:96:0f:ce:0a:8b:76:31:5f:a3:ad:ce:1d:84:d3:
43:93:5e:23:4a:8e:39:84:40:b9:c7:d7:82:23:cb:4d:32:b0:
a8:20:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:50:31 2024 by rpki-client on console-fra.rpki-client.org