Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.cer (raw, json)
Hash identifier: aeKVamH2ot79oWWkR6mVWQarmpYoGDiwKqORpBpUFB8=
Subject key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8BD442C2322E712F929865396063C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48968
AS: 199511
AS: 212882
IP: 91.237.218.0/24
IP: 95.130.184.0/21
IP: 185.14.108.0/22
IP: 2a03:ac40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:bd:44:2c:23:22:e7:12:f9:29:86:53:96:06:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:01:e3:0c:08:98:06:5c:a2:68:f5:da:d3:
95:67:e6:02:7d:24:f8:6a:4b:b6:17:cf:f7:a1:4f:
1f:b2:21:66:bf:df:b4:b2:98:a4:b0:ef:d5:58:73:
ec:e8:ae:6d:36:53:72:dc:0d:24:b8:fa:27:cb:fb:
bd:77:b0:21:19:0c:e3:34:98:f5:a3:2d:a1:ed:b9:
4e:76:2a:fd:17:cf:70:e8:9c:4a:5b:20:cc:5b:1a:
46:2f:b8:0b:cc:ea:9a:37:0a:7f:aa:d4:c7:08:32:
af:70:f2:46:3e:7c:d0:3e:71:54:03:91:82:d4:c3:
38:c4:f2:3e:a3:18:09:fa:1e:0e:c8:f9:ed:25:ee:
99:e0:95:83:ee:12:77:bc:d0:9d:ce:e5:2f:d5:ff:
a8:02:0e:e1:03:17:63:84:8f:2c:20:c4:7c:2f:1e:
e7:00:5c:99:cf:c4:65:c3:0f:76:ff:84:09:33:bf:
f5:18:17:67:3d:24:8c:4c:41:8d:bc:21:78:32:ac:
21:41:a9:6f:19:95:83:41:ea:f5:ee:7e:0f:55:4a:
3d:48:32:30:48:fb:62:69:4f:0c:37:30:14:d5:e3:
1e:7a:71:db:78:8c:cc:75:45:d8:b8:c1:fa:7f:0c:
18:76:e7:bf:93:93:2a:c9:dc:02:c6:1e:36:53:15:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.218.0/24
95.130.184.0/21
185.14.108.0/22
IPv6:
2a03:ac40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48968
199511
212882
Signature Algorithm: sha256WithRSAEncryption
17:95:f7:9e:c4:9a:26:92:3b:14:bf:85:60:dc:40:44:85:4a:
38:c7:8d:e3:bb:00:ad:5d:c1:5a:27:27:5d:b7:c0:5d:16:e0:
29:66:ab:30:80:bd:a3:8e:7e:6e:3f:d0:1b:05:8c:20:4e:44:
63:91:3a:95:5d:70:75:91:47:df:d0:f1:10:58:a2:9b:9d:e6:
9b:fc:fc:76:41:1a:31:3d:19:db:bc:b0:4e:01:93:18:45:e0:
1a:83:57:eb:4f:70:9f:77:53:0b:93:fb:5c:37:8d:c6:1d:e9:
72:f7:9f:6b:be:17:27:28:d6:e2:d0:6a:da:f5:21:8c:08:3e:
d9:f4:1e:49:0a:92:25:78:35:64:1a:4c:06:af:56:72:55:4b:
a9:8e:dd:eb:0f:70:c7:82:19:ec:0f:ef:7c:74:ba:ec:bc:f0:
f0:b9:1d:2f:b4:3c:1c:c8:4a:14:be:4c:d3:d0:1b:db:61:f7:
a1:b9:bf:71:fa:39:e4:e3:b7:e3:52:4e:d7:28:87:d9:f5:0b:
9f:d3:d3:7b:46:63:e5:fc:27:3d:bc:80:b6:95:95:90:18:dd:
11:09:b3:05:38:9e:a4:71:75:e9:16:82:8b:95:fd:54:32:9c:
5c:e6:68:29:46:6b:dd:3c:ec:08:0d:5f:8b:e3:09:bd:c5:f2:
b9:c2:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:43 2024 by rpki-client on console-fra.rpki-client.org