Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
File: 2C4TD2tr3205KA43XfNE5uCjSzw.cer (raw, json)
Hash identifier: HPYGRPVVPWBjSXewkovTmKudLgZdE8Ocm2i0FoPaLC0=
Subject key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F15B04CCFD2CFED9EF5836AF7710E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50180
IP: 195.189.166.0/23
IP: 2001:67c:2ff0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:15:b0:4c:cf:d2:cf:ed:9e:f5:83:6a:f7:71:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:35:36:cc:26:36:18:6f:3c:0a:02:f5:cf:
c7:fb:66:ad:58:7b:51:9d:65:12:2b:5c:84:d8:32:
7c:33:25:e1:e5:e7:01:c0:cf:3e:e6:a6:a2:ad:41:
e3:c8:3c:24:e5:d6:35:8d:35:f6:a5:6f:44:1c:a5:
fc:8a:de:65:3d:b2:5c:dc:92:58:a1:a3:6d:61:c1:
cd:4e:fe:3a:57:3f:d2:b5:0f:9a:89:8e:dd:5b:04:
fa:74:5c:77:5c:0a:4f:71:2b:15:9c:18:05:29:40:
f0:b3:b9:2b:ec:b5:1f:c9:5f:fc:84:50:8d:3b:2c:
a0:8a:90:c5:df:98:a7:bf:11:47:54:fb:b1:70:41:
ec:22:e1:e9:90:6b:73:90:0c:8b:80:40:29:87:7a:
72:2f:a0:8e:3d:c1:55:2d:72:1a:82:fe:4c:7f:de:
b5:12:47:e9:82:13:de:1b:e5:f9:b4:b1:b3:e9:f6:
21:b6:db:71:d6:25:8c:4d:92:eb:e1:bf:f6:d0:94:
ed:a7:43:38:c4:80:74:c0:22:ef:ff:ca:90:7b:a9:
0c:51:72:6f:44:1a:45:a5:d5:e6:9d:24:8b:cf:08:
91:91:1c:8f:a3:5a:96:ce:9a:a8:e3:6c:cd:a6:d6:
74:32:79:b3:6e:7d:38:89:f0:f3:89:52:4f:20:34:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.166.0/23
IPv6:
2001:67c:2ff0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50180
Signature Algorithm: sha256WithRSAEncryption
07:7b:f0:17:4c:ad:e4:6d:08:5f:eb:86:ed:78:d5:d6:a2:e5:
eb:3d:79:bf:fa:c3:7d:a0:3c:a0:fb:a2:a4:d6:19:74:83:6a:
a5:d4:cd:c9:0b:81:e6:ea:8e:14:01:70:05:5d:eb:10:a4:40:
4b:7b:5b:6a:90:a5:3c:42:26:53:4b:c7:e3:0f:bf:e1:4b:4f:
af:a0:85:6a:a0:3e:49:b4:cd:86:74:39:eb:38:ed:f6:b8:d7:
af:3b:df:cc:f6:a9:5d:7c:d8:01:07:c2:a6:db:f8:90:30:34:
15:b4:6e:99:5e:8f:52:da:da:3c:a3:78:78:30:ae:fa:95:3a:
eb:8f:af:ff:ff:65:17:84:01:b8:16:fb:8c:c0:47:b2:17:57:
6e:ab:dc:49:9d:74:4d:41:ca:dc:35:7a:91:0c:81:69:76:03:
9c:36:a1:fd:17:e3:0b:07:c2:71:c7:87:bb:f2:f1:88:fc:27:
08:bb:56:2e:80:e9:1b:52:3e:be:f2:ae:51:35:04:60:38:39:
5c:a7:00:d1:e7:d6:a2:c1:b5:b2:97:b5:57:d4:1d:c3:08:da:
82:66:b5:12:1d:19:e6:66:cc:ac:37:54:67:2b:8d:72:bd:6b:
4b:b6:3f:db:c6:a8:cc:80:d8:86:ee:ce:d8:6e:a9:a5:2c:36:
54:1a:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:24:29 2024 by rpki-client on console-ams.rpki-client.org