Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.cer (raw, json)
Hash identifier: Aes76XbIVl9RG4ZeJevU/laOi6HZrpc1PIWIqD5n3yQ=
Subject key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB1E99C7539708C0D89D81098E0656
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47767
IP: 94.124.184.0/21
IP: 2a03:9780::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1e:99:c7:53:97:08:c0:d8:9d:81:09:8e:06:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:7a:ba:95:95:f1:87:c2:52:3a:c7:ca:bb:
ca:33:a5:6d:51:9e:cb:75:a2:c3:6c:21:d6:b9:3f:
ae:ee:3e:14:d7:8b:a9:85:8b:a2:4e:cf:30:05:b1:
1b:4f:01:b1:f2:7c:63:97:9c:94:96:a8:68:9b:d9:
ee:f3:d1:b5:50:fd:7d:89:41:7d:f9:cd:b3:22:b7:
19:6b:ed:01:e6:08:ad:24:c8:20:14:33:aa:a5:9e:
90:95:54:df:ba:16:9a:7a:70:96:91:39:39:46:22:
9e:70:70:cd:a1:10:79:1a:d5:19:c9:94:6b:4d:32:
78:3b:5f:52:83:ed:17:c4:97:71:1a:4f:2d:f0:0d:
e9:ed:16:12:f4:b1:76:15:05:03:46:3e:6e:87:2e:
ca:dc:30:5d:62:c8:4d:e7:47:ef:fe:92:de:c7:60:
b5:16:eb:e7:9e:47:ce:2c:43:79:df:8a:f4:a4:47:
00:03:f2:41:3b:13:09:83:cb:99:32:8c:06:e1:8d:
56:30:ad:3e:d2:b7:95:ea:fa:87:88:59:4b:dc:c7:
a7:5f:32:68:b1:61:24:d2:2d:4f:9c:09:8b:3b:eb:
45:d8:14:02:27:ac:52:15:83:1f:fa:74:cf:1c:96:
b2:84:2f:9f:09:f3:5a:3b:7e:95:6c:26:73:24:d2:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.184.0/21
IPv6:
2a03:9780::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47767
Signature Algorithm: sha256WithRSAEncryption
a3:1a:e7:a7:e6:de:f0:96:3e:90:d1:a9:3c:a2:43:44:2b:93:
d9:7f:8e:c6:5c:30:95:5b:96:19:7f:01:8c:84:e8:e1:e0:85:
54:4c:7b:45:3a:3f:13:8d:9d:14:bb:c0:48:46:0a:2f:ee:18:
bc:81:b3:ad:0c:f3:cd:83:bd:07:57:ea:c9:85:77:a7:96:f8:
bc:ac:ba:a1:b0:35:14:fc:58:7a:5f:98:e0:ed:97:15:bc:a3:
3f:0e:ee:52:eb:9f:32:ea:75:c7:b6:fd:85:6b:97:1a:64:f7:
d9:fb:61:cc:f7:e3:c6:8f:db:4f:fe:f9:57:37:71:0c:4d:5c:
1c:9f:3b:f1:dd:ec:4a:78:f6:6d:3a:5b:12:66:f1:f5:7b:c5:
a0:50:53:b0:07:de:6e:c2:09:dd:0e:26:6f:e3:e0:e2:b6:38:
ef:c2:47:08:7a:1d:51:f0:e2:3e:45:99:14:f3:5f:ea:c9:5a:
97:92:73:4d:83:4a:7f:4b:70:75:dc:58:d7:0c:c2:cb:6c:3c:
87:92:c5:06:ba:8f:76:bd:aa:17:c4:f4:d6:b6:1e:b9:39:1f:
b1:e1:71:46:ca:1d:1b:47:97:f7:0a:2a:f1:26:77:ef:1e:7d:
53:ed:16:bb:64:51:5a:84:28:97:3f:98:3a:87:a4:8f:9b:75:
db:b2:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:53:32 2024 by rpki-client on console-fra.rpki-client.org