Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.cer (raw, json)
Hash identifier: bKHpuIQsHEm3IN4UxssEYKgXH0ttXhGkg4XOYSi949I=
Subject key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EB7023DD8C6CB6C5CF7A951C8DFE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207276
IP: 185.112.72.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b7:02:3d:d8:c6:cb:6c:5c:f7:a9:51:c8:df:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:57:2e:fe:47:5a:fa:84:fb:9f:c3:90:9f:
40:62:4c:93:8b:9b:a9:b6:f5:30:16:f5:be:f9:36:
c8:ee:d0:e0:84:24:90:e1:6f:48:0a:6b:4c:92:55:
5e:77:0c:17:8a:35:13:f4:fa:9b:79:f8:18:38:c6:
b5:d0:9e:a0:4e:e0:11:31:2e:ea:d1:7a:e1:b9:7c:
c9:56:10:78:29:a2:20:59:dd:65:e7:37:4b:24:92:
9f:92:f9:ea:b3:91:7f:ce:c5:cf:6b:8c:af:ef:ab:
8c:1e:02:05:f9:a1:0d:52:e0:87:bb:d1:54:28:07:
ef:6e:0c:9f:31:3b:d8:09:0b:8e:46:ef:55:dc:99:
af:73:83:f0:c4:58:20:32:ff:0d:dd:83:67:44:32:
64:49:6d:d0:42:5b:4e:64:15:d8:7e:51:b6:3f:e1:
83:55:d5:38:45:24:37:9f:53:b0:c8:33:8d:8c:5b:
ef:0c:7f:fc:7b:d9:a7:a4:06:f5:56:32:e5:44:5e:
0a:93:fd:0f:96:7c:df:b3:32:25:a6:ad:5c:56:ca:
5f:a1:fb:8e:89:ea:f6:3a:db:f0:d1:93:79:53:3b:
30:8d:ad:29:40:5b:d8:65:4f:9e:8a:b9:00:8e:d2:
51:9b:ee:9e:37:6b:71:a4:62:ea:84:71:fd:82:d6:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.72.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207276
Signature Algorithm: sha256WithRSAEncryption
82:25:c5:0c:42:2a:15:47:2f:68:80:27:bd:9f:f4:3f:4e:1d:
c3:0f:ec:e8:43:f3:a1:da:31:aa:dc:48:b9:d4:01:89:b1:ba:
c0:3e:6f:8e:3b:dc:e8:89:e9:92:d1:33:4f:89:59:52:fd:0e:
1b:c4:a8:32:10:85:eb:04:da:85:58:55:94:1d:14:5a:62:f4:
1e:f9:fa:ed:8e:34:d0:f9:e4:33:ca:26:1c:42:97:e0:83:71:
d5:ac:39:62:ad:4a:3f:35:cf:d9:68:58:ae:82:19:b4:66:6c:
38:08:8c:10:52:93:13:79:c6:6e:10:43:47:12:33:84:87:ca:
cd:8f:d0:ac:d7:96:d0:2a:a4:5c:7b:6e:b0:88:6c:cd:0c:a4:
77:3a:27:60:c1:f6:f0:31:b5:6e:82:f8:06:6b:c5:42:a0:cf:
e9:29:e9:45:f6:70:14:41:aa:43:73:ba:fa:7d:5e:18:24:96:
72:7e:2c:b0:c7:29:a3:e4:b6:fc:74:e3:8c:ed:0a:e2:54:d2:
ab:8d:cb:ef:72:61:78:0d:c4:14:6b:37:91:f3:30:fc:9a:0f:
2b:fd:db:36:c2:a2:45:b2:fd:a4:21:b7:45:b7:1e:4c:10:6f:
bd:f5:5d:98:6f:ae:c3:72:9c:95:8c:8d:9d:1e:33:24:85:9a:
0a:8f:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:24:31 2024 by rpki-client on console-ams.rpki-client.org