Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
File: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer (raw, json)
Hash identifier: B1mBpAnU/fU/xDmIrhpq6Xo6T7w6wDEL/0oJzwrqQPo=
Subject key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DDA8D29E5ED5AF09DCC92D7747EEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34330
IP: 193.43.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:da:8d:29:e5:ed:5a:f0:9d:cc:92:d7:74:7e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d795a7259f9537186493f482d55cef4b64b1c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:85:08:6f:24:b4:97:94:03:38:1e:9a:c1:
d1:9e:a7:a3:8d:57:b6:c6:b0:21:34:c2:df:2d:bd:
63:1e:c4:1c:17:26:84:57:c3:23:ef:32:1b:88:b8:
75:7f:2d:d7:e4:27:ea:7e:39:e7:79:a9:c4:ee:77:
68:c4:a4:24:17:f7:b8:46:da:9b:0f:00:43:c9:f9:
16:91:7a:61:49:7c:38:2e:4a:43:c9:da:62:fe:9b:
cd:f1:a0:c3:d3:93:a8:41:d2:83:4b:3e:4d:ef:b7:
f9:79:60:88:03:56:a8:a4:25:ab:aa:bd:87:b5:cd:
d9:91:1e:4f:4f:74:75:d0:60:38:8b:45:ea:48:f3:
f4:df:51:53:18:11:7d:a4:d5:7e:6b:9b:e0:06:e5:
de:10:73:d1:92:dd:d5:ee:44:7b:69:2e:d1:40:bd:
ad:bb:05:ae:11:f0:ee:01:b9:13:a6:e4:fc:80:3c:
53:1b:8b:2c:e1:49:df:53:04:68:fc:1e:8f:37:9d:
7d:b0:72:fe:f1:77:9b:38:94:75:f8:3d:d9:6e:f4:
66:33:73:b6:98:8a:e4:36:fc:2b:2e:1f:1d:cb:c7:
f9:df:62:aa:77:10:a4:a7:e5:e2:d2:52:fd:da:1d:
44:85:41:7f:1c:e7:10:a6:9a:b8:5d:96:85:74:95:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.77.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34330
Signature Algorithm: sha256WithRSAEncryption
ad:3a:38:d5:21:0a:83:78:05:20:8a:a8:28:ab:16:1e:06:fd:
84:25:7e:29:68:1f:14:ba:17:4a:e9:00:36:0c:d7:a8:c5:fa:
9d:98:71:13:fe:0b:3b:6a:e4:fd:01:55:3e:57:8a:00:51:4d:
02:a3:25:46:96:f4:e2:62:59:0c:ea:33:18:81:84:54:8a:ba:
21:ec:99:93:09:5f:aa:92:3e:9f:43:32:b2:4f:96:5a:8e:a3:
10:f5:a4:7d:1d:40:6d:e4:79:b4:a7:aa:89:02:13:a6:f2:16:
24:20:92:11:a0:ee:e3:84:96:6a:81:10:1e:96:81:fd:44:eb:
4b:38:a6:10:55:c7:c3:ad:12:77:cc:ff:bc:e3:64:a3:3c:cb:
77:7a:ef:f9:6c:8d:3d:88:c0:d6:5c:2a:8e:97:61:97:97:b2:
d5:6e:68:6e:29:51:10:eb:3d:67:50:97:5e:2d:fd:f4:2a:e5:
f0:50:54:e3:9f:60:2d:8f:ed:ab:4f:7b:5b:ac:21:e2:5a:8e:
81:af:f4:b6:c8:d1:4b:43:bc:c8:53:71:30:68:b3:0b:9c:86:
33:f3:ac:75:9b:1f:6c:7c:89:c4:cc:c4:8a:20:e9:55:6a:c4:
3c:82:43:fb:64:2a:7f:c4:50:73:d9:3d:fe:88:ca:5e:01:5c:
bb:a4:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:17:02 2024 by rpki-client on console-fra.rpki-client.org