Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
File: 1BsIHA35lAorAgpOvoqXScv-rVU.cer (raw, json)
Hash identifier: 8c5U0h9WQnpBG7SCmno+mC+gFtlQ1qh7PPgHhm87fXw=
Subject key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019348A449483397F735A1975D0A61829F73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Nov 2024 08:15:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216450
IP: 85.239.92.0/22
IP: 2a09:b000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:a4:49:48:33:97:f7:35:a1:97:5d:0a:61:82:9f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 20 08:15:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:54:44:5e:47:59:d1:44:7b:b7:ff:44:e6:
f4:18:24:ca:bb:3b:f8:85:c7:49:9c:7f:14:d2:63:
8c:46:07:71:60:7c:13:1c:8a:9d:bb:85:a1:b1:a3:
36:30:b1:f9:d3:47:90:fd:d9:49:55:fb:23:f6:17:
44:19:8b:cb:3c:c6:2a:19:7d:45:d6:b1:89:ff:91:
e8:83:80:c5:7b:8a:00:b2:a8:39:db:c3:15:13:d1:
18:2f:85:c4:17:3d:11:b4:57:65:67:80:f9:28:ff:
dc:7e:0c:43:0b:5d:0a:38:91:a4:97:7b:a0:65:33:
b1:15:f9:54:16:cc:bd:45:d5:d3:cd:49:b0:4a:e3:
98:b1:72:0c:2c:c9:ad:ce:66:61:48:5f:6b:39:04:
d7:4e:b4:22:cc:7a:ba:86:41:e3:e0:a8:43:ce:c5:
bb:b4:e3:90:a0:64:48:ea:07:cf:22:ae:34:68:88:
d2:4a:6b:27:c8:12:85:78:53:02:57:63:97:a3:db:
17:a5:b2:ee:38:d6:28:41:7e:45:a3:9a:35:9c:43:
c4:eb:8f:02:ea:3e:f1:4e:f7:09:e3:52:e3:ac:be:
a6:93:70:5c:cd:d1:f2:7f:dd:22:86:bb:39:4d:d1:
43:22:fd:1e:a9:5d:f1:0f:c2:2e:91:27:53:0f:8a:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.92.0/22
IPv6:
2a09:b000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216450
Signature Algorithm: sha256WithRSAEncryption
aa:8a:19:4e:bc:9a:ec:17:e4:1c:51:43:bd:d3:9e:29:68:9c:
c2:d9:d9:ae:62:8b:55:6e:5d:4a:21:05:ef:9b:4e:e2:4e:5e:
9c:f4:0d:d8:ad:b3:05:c0:9b:9d:29:8d:6f:5f:b9:32:c8:54:
ab:06:03:20:70:f0:a2:71:6c:49:9e:8b:fb:27:be:6e:2e:c2:
8f:50:0a:e9:cb:ba:76:a0:af:2b:56:dd:c7:d4:eb:b3:ca:f4:
a1:6c:8f:48:d3:6d:55:34:3e:81:1b:23:8d:92:d6:e7:7a:1e:
50:17:ac:3c:ed:13:e1:3a:7c:1d:61:2e:98:62:79:c6:65:3e:
d0:0e:78:7a:8a:1a:fa:11:9b:16:a9:2a:33:82:ea:3b:f2:60:
bb:08:2c:7a:03:e0:2c:b5:3a:cd:7e:96:27:1a:9e:b0:79:7d:
9d:24:08:6b:d2:f3:48:98:cb:b6:25:36:cd:c2:16:31:b1:e5:
94:60:49:da:91:29:a9:bb:de:5e:be:d8:df:94:05:0c:b8:52:
37:46:eb:74:88:ee:e3:57:bf:7d:72:95:04:e0:c1:9e:6b:52:
22:42:96:41:d9:7c:bd:61:7f:3c:8d:97:f7:bf:f0:6c:a5:dd:
4e:b9:c8:7e:4e:e2:df:c2:57:81:a7:7c:e3:09:96:94:6e:0f:
11:03:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:15 2024 by rpki-client on console-fra.rpki-client.org