Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
File: 1ikBDNsLMSwy4Hqvm3INc9O806s.cer (raw, json)
Hash identifier: y2FyDbZ1X2UKQtaC6geapk2RsnuNbOm8XJ/tXy9SeBU=
Subject key identifier: D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4250B2C9CD7D69FC5CA8979060BF2E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206757
IP: 45.147.16.0/22
IP: 116.204.252.0/22
IP: 185.218.236.0/22
IP: 193.16.151.0/24
IP: 193.16.156.0/24
IP: 195.10.218.0/24
IP: 201.148.168.0/22
IP: 203.78.160.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:0b:2c:9c:d7:d6:9f:c5:ca:89:79:06:0b:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:9f:7c:cc:52:2e:9f:92:4b:03:10:24:9c:
4e:00:54:44:74:2a:5c:c2:04:91:a7:d6:17:71:b0:
d5:52:db:29:ec:29:dd:89:0e:21:61:df:32:e1:d5:
85:1a:a6:13:dc:b8:83:b0:9f:92:9c:f7:b3:6e:6e:
ae:33:1e:e7:83:e7:e5:4e:87:6d:71:e1:ea:fc:32:
c7:97:b3:3f:f0:f5:81:8c:de:f2:c9:12:45:15:ae:
3d:df:b1:08:b2:59:1e:53:1b:35:34:64:47:7b:97:
bf:a2:f8:ee:3e:a7:a9:b8:e3:93:0c:95:ff:29:d9:
6e:9b:60:be:2d:12:c5:5c:0a:ed:74:a5:ef:29:b0:
3b:87:fe:05:d2:35:76:fe:57:46:a3:b0:5c:1c:c4:
46:e9:6e:2c:bc:4a:a1:29:11:48:45:d8:92:aa:0b:
bc:d8:31:92:e7:b9:27:1b:6b:96:ab:db:de:7f:e2:
87:31:90:ca:49:37:f5:f4:2e:ae:3a:cf:57:8e:59:
f3:0b:29:26:f8:5b:9f:a2:09:ce:e8:6e:42:c5:21:
ea:68:c6:05:c5:01:31:00:93:93:87:aa:e6:62:ef:
70:3b:43:6d:68:ea:e2:e2:0e:8f:63:25:4c:9e:ec:
b0:d3:ef:d7:13:83:1d:89:ed:80:7b:7e:48:6e:4c:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.16.0/22
116.204.252.0/22
185.218.236.0/22
193.16.151.0/24
193.16.156.0/24
195.10.218.0/24
201.148.168.0/22
203.78.160.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206757
Signature Algorithm: sha256WithRSAEncryption
28:de:b7:0a:b6:37:97:5c:af:46:08:a7:34:63:4f:e6:67:5d:
37:82:d7:ac:fb:81:21:09:d9:bf:3f:ce:dc:23:78:fc:d1:2d:
37:cc:38:6e:96:cd:38:92:e4:f4:e0:2f:71:d1:16:91:06:a7:
d7:c4:ac:75:db:fd:69:9d:d3:76:6a:22:f4:77:60:df:09:42:
2d:4b:ff:a1:f5:29:05:a6:91:26:3f:44:47:a7:df:ea:9f:da:
f9:9a:8c:cb:1d:92:0e:bb:c5:96:24:49:9e:db:49:98:4c:6c:
f1:a0:4e:82:71:0e:d6:16:e2:ac:35:d4:f2:4a:5c:7a:a5:08:
2c:83:12:75:60:09:57:7e:db:3d:07:e9:33:d8:1a:f6:76:f9:
ad:e9:fd:81:e7:c8:bc:7b:23:cd:9a:3c:cc:fb:f9:3b:55:17:
41:37:5c:0d:26:a0:68:dd:5a:ef:7d:f5:51:be:b1:39:65:a5:
c4:30:9d:cc:01:b4:e5:97:ee:e8:f3:d2:93:1e:6d:92:b4:22:
7a:d3:47:8f:dd:f6:d5:83:c7:5f:5e:a7:21:37:ff:f7:7c:aa:
fd:1e:fe:13:1f:d3:cc:cc:9e:a8:0d:bf:12:02:d8:05:d9:a4:
a6:57:bc:f3:6a:54:ed:f2:50:3d:9f:98:75:3c:4b:dc:84:f6:
98:09:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:17:47 2024 by rpki-client on console-ams.rpki-client.org