Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
File: 42tMWObP2fp-ciKlizYm23uYUyQ.cer (raw, json)
Hash identifier: SPn8X8uVYShHxCjEhv7Rd0xNAsQ8bVzYPSkh47ktwkY=
Subject key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79538B45A44875EACFDF44DA4AF7356
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8275
AS: 43016
IP: 185.121.216.0/22
IP: 195.181.192.0/20
IP: 2a06:a0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:38:b4:5a:44:87:5e:ac:fd:f4:4d:a4:af:73:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:25:a8:a0:7b:e6:26:4d:0f:85:4d:e3:d5:
2f:82:c7:2a:1d:0b:52:09:03:58:10:52:12:7e:a5:
fe:3d:33:bf:20:9e:ad:a8:1a:c2:93:14:3d:74:c4:
ff:44:d9:42:18:0b:d5:76:47:48:45:fd:a3:de:67:
32:22:1a:a8:1a:d5:fa:67:b1:78:27:73:8e:d0:ed:
f4:2e:c9:56:a6:58:c1:b0:85:6a:d9:ef:6b:72:48:
80:af:12:52:80:aa:48:84:0c:c6:45:a4:6d:64:bf:
93:e2:d4:52:d1:0c:89:e2:de:fe:a5:4e:0b:13:52:
28:d3:a7:f9:8d:d6:6b:55:9f:be:15:b4:b5:10:1f:
cc:9f:72:2e:c1:07:a8:1e:2f:45:b4:ff:e7:1d:e7:
bd:d0:d6:dc:c9:d3:3e:cf:f6:e4:29:f6:bc:7b:f0:
b3:e6:36:ce:d7:51:b1:d2:ab:6c:73:e3:ea:f6:0a:
4a:80:1c:6d:1e:a1:d2:ef:48:9d:ff:8f:8e:27:05:
46:64:97:44:76:3c:0b:3b:41:bc:e6:e1:4c:fc:6a:
06:45:f1:99:36:04:a1:b3:3e:e7:6c:ec:71:68:cb:
8f:31:c4:a2:90:21:bc:d2:81:d1:d9:e5:3c:8c:61:
47:3e:87:3b:0e:40:8f:89:64:5f:a1:6b:3c:37:43:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.216.0/22
195.181.192.0/20
IPv6:
2a06:a0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8275
43016
Signature Algorithm: sha256WithRSAEncryption
34:be:a1:69:9c:95:96:ab:37:bf:ac:b3:59:27:93:ad:03:4d:
a6:c6:30:85:b9:13:34:9b:be:d9:3e:c3:51:74:2e:c8:a7:82:
a9:58:b3:b6:cd:2b:5e:65:b5:fd:6b:84:af:8f:96:34:ae:f1:
d4:15:82:7c:58:34:aa:cc:18:6f:aa:07:8b:4f:5b:af:42:fe:
3b:a0:df:1e:50:81:53:fe:fe:73:7b:9b:11:a5:7c:c3:8d:a4:
0e:71:4f:f3:5e:ab:b6:39:0b:d3:3c:0d:2b:e7:fe:30:66:65:
3e:7f:4a:cc:a9:a6:46:0f:36:f9:8d:4d:ff:74:41:88:ac:56:
8f:ce:3e:65:9a:0e:87:4f:14:52:d4:d3:ef:c2:96:dc:a2:68:
df:15:95:e3:4b:3a:3b:da:d8:ff:3a:7f:e1:ac:3a:0a:d7:cb:
32:94:33:ad:d4:42:2e:bc:0e:65:2c:09:e5:c4:0b:f3:b6:76:
8b:36:5a:4b:f2:f4:14:7e:2e:68:1e:20:66:f7:82:6f:49:be:
9f:8c:94:e0:15:e9:e0:75:41:95:1d:3b:25:87:7b:9a:03:4b:
03:ca:5a:c7:98:e7:88:de:e6:c2:ef:29:4e:b3:82:46:77:b0:
b8:4b:3a:4b:77:d8:54:81:0d:97:65:4b:49:78:cc:e0:9c:9d:
53:91:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:51:24 2024 by rpki-client on console-fra.rpki-client.org