Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer (raw, json)
Hash identifier: B3RW+n8UTrs8lV+6Pyg4VzKhJuFj1vAHqhZ9MgE3rQ4=
Subject key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B78D6F7351E6E0DD739C6B15DE6C22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198970
IP: 185.159.116.0/22
IP: 194.49.126.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8d:6f:73:51:e6:e0:dd:73:9c:6b:15:de:6c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:88:d5:84:11:e0:4c:3c:3d:b3:ef:24:b0:
3b:8b:37:96:4a:f9:26:1f:2b:5e:cf:e6:c5:2d:31:
8b:d0:ac:c0:be:b4:4a:d2:12:59:cb:b9:f1:10:9b:
3c:70:d5:0c:56:7f:d9:3d:c6:11:32:cd:8f:2a:1a:
bf:b8:81:3e:34:90:c9:3c:58:63:22:2e:36:5c:bf:
49:39:d0:16:05:a4:c2:6f:9b:ae:d3:4e:99:24:f6:
f6:c9:71:b5:c4:de:8e:1f:6e:1c:13:8b:a3:c6:37:
47:4b:05:dc:7e:97:2e:d6:63:ee:c4:ad:0d:ed:46:
95:ea:58:f1:b2:d7:90:aa:9c:cf:8b:67:44:65:0d:
45:7f:aa:e8:5a:fd:e4:a8:01:98:30:a3:51:f9:76:
41:88:7d:a0:56:99:36:d6:e9:a0:21:bd:ea:2b:f4:
e7:43:9a:a3:75:7c:46:e9:78:d9:61:e9:32:47:e2:
ba:cb:bd:8d:2c:88:86:0a:27:0d:a1:88:9e:d2:36:
30:a9:33:07:ef:a8:ac:e9:44:70:38:f1:aa:36:db:
58:bd:89:9f:fc:7b:87:4b:14:be:3d:13:ae:f8:ea:
85:7c:3f:77:72:cf:6c:c5:41:b4:c5:63:db:00:32:
f8:7c:c5:b6:20:60:bb:cd:df:9c:30:cb:20:3b:ab:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.116.0/22
194.49.126.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198970
Signature Algorithm: sha256WithRSAEncryption
91:5b:78:11:c6:ff:1e:6a:b2:77:85:59:74:6c:46:e3:a7:6f:
5b:87:da:7e:71:7d:c5:fd:a0:a3:b1:bd:14:8e:44:0d:44:cd:
1f:be:af:e0:83:86:bf:1b:ec:fd:38:a9:89:33:c4:38:56:17:
45:ea:5d:ac:25:c0:a4:ea:dc:4e:35:ab:e9:b7:04:f4:d8:48:
e8:b7:01:23:f7:ea:5c:7b:a9:22:bd:cf:f6:6e:e9:a0:8b:23:
03:21:03:57:fd:e0:df:a0:78:d3:49:11:25:38:b3:15:d9:dc:
74:51:d9:2a:9a:88:1c:b9:72:20:5a:f9:65:3f:0d:37:93:7c:
5e:b5:82:26:04:62:83:42:03:08:4c:62:cf:25:7a:53:9a:39:
b9:f7:db:54:2d:00:0c:87:dc:a0:ac:75:91:17:b4:e5:5d:12:
3e:9b:7d:86:0e:57:f0:b1:f3:bd:95:cf:2f:d3:e1:f8:e1:48:
8d:aa:95:58:90:30:91:a6:c1:6f:65:13:a9:43:f2:06:5d:25:
ff:d7:ac:0d:27:2d:91:ec:ac:1f:9c:01:ce:71:63:d3:a0:ec:
6d:4f:99:a3:e9:71:ce:af:24:e5:08:7a:05:1e:81:c3:1f:44:
c4:38:5b:0e:01:5a:db:75:8c:a3:e2:1d:25:f5:38:c4:4e:71:
48:a3:6a:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 22:24:21 2024 by rpki-client on console-fra.rpki-client.org