Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.cer (raw, json)
Hash identifier: SmCZtaoLmyqEQcwSUyiLAtwCpaaiiGcu2Elop43X+N8=
Subject key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF83E97AA68C03CA76E1C49CF9289B911
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Jan 2024 11:18:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57521
IP: 45.10.39.0/24
IP: 2a13:bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:3e:97:aa:68:c0:3c:a7:6e:1c:49:cf:92:89:b9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 11 11:18:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa7eb1115130fac94091061e31462a565226885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:b6:4c:92:b6:7f:85:72:e1:cf:08:b8:e0:
2e:53:97:59:83:d9:3a:d1:d1:ef:d6:88:4a:19:ca:
27:19:15:1e:b4:f5:ca:1c:ed:ee:79:d0:42:c1:cd:
c1:5f:e6:da:7c:b8:f5:96:31:61:ed:4e:6e:6f:b9:
21:b7:4a:9a:09:c2:cc:6a:ac:61:4b:b0:ae:61:16:
d1:b0:76:49:b8:90:ec:0b:ee:6f:14:01:83:0a:c0:
4b:3d:a8:32:a5:f5:4a:4b:ff:e5:70:57:cb:4c:39:
d9:37:ea:0b:70:00:cc:ec:89:3b:dd:68:b5:11:b9:
b7:d3:0d:b5:3d:6c:7e:f4:f3:79:4b:70:48:3f:79:
b9:e9:dd:75:b6:a7:d0:0c:84:fc:9a:3f:eb:cc:f6:
95:9b:db:84:09:81:b0:2e:ab:d0:d3:d5:a5:87:b8:
8e:5e:35:07:a3:18:3f:db:47:44:f4:dd:f0:0e:8a:
dc:1a:c3:8b:bb:62:56:1c:7e:f8:7e:36:7d:05:50:
b9:2f:39:18:bf:4c:09:c8:a5:c5:5a:cd:76:56:2a:
61:9a:79:fc:98:66:93:6e:07:7a:85:9d:64:35:98:
97:93:8b:9c:f4:4d:83:92:66:97:e1:dd:b2:ac:d2:
ac:40:d4:ff:58:fc:3d:ee:05:25:44:65:23:a5:92:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.39.0/24
IPv6:
2a13:bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57521
Signature Algorithm: sha256WithRSAEncryption
93:a0:21:46:ae:16:35:f4:2b:a9:e1:b4:8a:6d:56:4e:75:9f:
ee:44:6c:e2:0b:f1:3d:32:e4:4d:ee:3f:bd:23:d6:a5:f1:c7:
03:c8:0f:b4:fc:13:c6:30:31:87:60:c2:ce:78:7a:f9:ef:1c:
82:be:e6:88:81:22:f6:94:64:d8:4c:85:06:fc:ab:ca:11:62:
86:e3:bd:5c:ca:b4:b7:0e:e3:aa:96:97:d7:0e:b0:1b:2e:34:
81:85:9f:67:9a:13:85:3e:ba:60:40:35:a8:8a:1b:d1:3e:1a:
b9:f0:b2:f2:50:4b:43:c4:c4:07:12:70:53:22:b4:2d:4d:7e:
79:2c:dd:24:66:81:26:db:3e:84:49:80:99:e3:09:ec:9b:ff:
0a:27:da:bc:13:f1:8b:f2:82:50:cb:3e:bf:13:90:27:8a:f9:
e4:58:f9:4c:a7:99:4b:c6:ce:a8:c7:c1:e8:ff:8a:a6:6b:32:
46:5c:e8:a7:85:cb:45:58:25:aa:36:91:7b:1e:41:cd:09:44:
bf:15:b7:31:2c:b1:9a:48:a1:42:fa:57:3c:9a:bc:95:6a:aa:
f4:5b:f1:f2:e0:71:2a:4e:c9:dc:3d:bc:5e:3c:8f:bf:f3:97:
d6:ec:48:ab:b6:c5:03:15:c0:45:cd:fb:b5:ca:7e:96:88:33:
c7:21:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:17:42 2024 by rpki-client on console-ams.rpki-client.org