Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
File: 36JPgpi-GMimnxgSjwZOcAPh090.cer (raw, json)
Hash identifier: 04WGOArY8V5qdKAKjxOhZ6y/G7rZZGcShKOZcs0LZIg=
Subject key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801BB6A2A4552B2F18A0CD192B94AF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60033
IP: 2001:678:b5c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:bb:6a:2a:45:52:b2:f1:8a:0c:d1:92:b9:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:98:9d:8c:0a:6b:11:be:9e:0a:43:ac:79:
b2:0c:92:ae:cc:9c:4b:d6:e5:4b:44:65:37:1a:4a:
d2:71:63:dc:6d:ec:22:fd:02:23:9c:68:e9:f8:bc:
25:05:55:b6:3c:62:44:89:2b:97:7b:50:28:76:ff:
95:7c:0b:4d:3a:8a:b4:c6:66:67:da:fc:97:20:63:
f7:13:b6:85:f7:8b:8b:a3:1b:1c:b6:4e:b0:b3:df:
df:96:66:c8:aa:0d:55:6f:6c:2d:0f:8c:d5:03:67:
ea:43:14:ff:3b:ce:90:8e:08:51:48:7a:15:ba:ef:
cd:5a:8c:2a:d3:99:ad:a4:3c:43:6f:27:47:1c:5c:
c8:2e:ae:6e:f9:2c:1a:d7:a6:e9:c1:48:59:3b:a3:
aa:e4:97:e6:f5:e2:0d:d4:ea:21:97:0b:b3:be:b5:
2a:68:fa:09:3e:cb:db:be:ee:2f:e5:70:ca:45:d7:
53:80:7d:ac:bc:83:c3:13:ab:24:da:9e:90:d0:6d:
e3:af:b5:28:08:7e:d9:5a:48:e6:fe:d7:15:f8:60:
10:85:54:6e:e7:0c:13:38:79:36:bb:08:a0:be:33:
80:a2:18:7e:a4:93:df:3c:4c:a5:9e:0b:d9:17:b1:
33:2b:9e:ac:cb:41:29:68:a3:50:83:e2:11:d2:30:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b5c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60033
Signature Algorithm: sha256WithRSAEncryption
55:2a:e4:40:69:c8:64:00:c4:fd:d9:10:87:bb:5b:64:1e:0f:
74:2d:c1:c6:52:0d:0a:d9:d3:a8:f8:d4:80:1f:dc:83:b9:4e:
77:e5:05:44:bc:db:1e:9d:2d:ba:00:12:f9:e1:63:bb:9a:dd:
5a:9c:12:8e:03:18:9b:c5:8e:70:77:dc:0f:06:84:48:3d:19:
ea:cf:91:ab:32:03:93:3a:3b:66:6d:5c:be:a8:70:73:39:51:
c3:3f:23:6c:29:cf:15:ff:97:40:52:65:40:96:8b:3f:56:de:
cd:80:5e:95:47:38:73:74:c4:4b:6c:be:16:7d:58:04:2b:d2:
10:48:78:26:4a:a7:e7:32:00:20:94:7a:f2:8d:f4:13:b3:90:
af:5c:73:5c:6c:5a:9b:d6:7d:fa:1f:7e:05:d6:7f:09:36:48:
74:b9:05:f0:ba:d8:58:5a:5b:1c:78:86:a4:de:35:ee:5b:55:
12:a4:fa:b9:31:ca:a0:92:36:83:af:7c:8e:65:10:ae:16:e6:
16:01:2f:2d:b0:f7:9f:3d:89:a3:44:09:2a:fa:2d:89:9e:73:
1d:83:75:2d:5e:c7:84:aa:40:f2:b9:49:f9:76:2c:c4:0c:6d:
a8:da:97:9f:de:dc:e9:3c:71:24:05:bf:7e:2b:9d:53:66:e4:
b1:a1:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:23:07 2024 by rpki-client on console-fra.rpki-client.org