Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
File: 4kLCt011daIop-ZPBAbzo5fHrlY.cer (raw, json)
Hash identifier: NCCEA9o9p/YCmOVaMQVR4u/GkZXg9TZcJSdY6oJox8s=
Subject key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348EA7273D21F40B5E7D2482E9295E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57871
IP: 176.110.128.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ea:72:73:d2:1f:40:b5:e7:d2:48:2e:92:95:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:ba:ef:3b:af:60:19:ce:75:68:97:1b:53:
8b:cb:17:21:af:3a:8d:e7:f7:4f:83:a1:4e:29:4d:
9a:b6:17:49:bf:13:3b:26:e1:6a:57:34:99:e6:07:
60:61:16:83:e0:79:28:46:14:84:68:30:12:37:3d:
fb:30:13:68:90:a7:a8:c7:bf:2f:43:0d:28:71:06:
e9:6f:d2:87:22:29:03:59:d3:3a:95:0b:1a:d9:26:
66:df:17:ba:4a:b7:c7:37:70:45:97:e6:e8:b1:8c:
5d:d3:6a:58:67:da:ac:63:f6:76:95:cc:c9:cc:ee:
8b:f3:81:52:b1:6a:4c:6d:1c:2d:12:2d:56:39:07:
0a:fc:8a:96:93:f1:42:85:f5:ba:61:33:fa:44:60:
00:8a:9b:cd:77:95:f2:1e:ac:76:4a:c3:35:45:76:
c3:fd:de:0b:e6:63:83:b4:0f:c7:73:b8:c8:f2:d2:
a0:30:2f:8b:a0:d1:d1:8a:8c:b8:b5:54:c4:0b:64:
a3:f7:f3:a3:2a:d1:7b:5b:e0:9b:3d:f1:87:8f:25:
32:a5:25:8c:11:db:3b:e3:6e:7d:6b:a9:b5:0c:c8:
9e:67:0b:74:5f:87:78:17:b1:b8:a7:48:bf:37:91:
32:a6:45:4e:57:5c:cb:e7:8a:ae:a0:b0:54:57:46:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.128.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57871
Signature Algorithm: sha256WithRSAEncryption
99:af:e2:10:28:64:1e:cb:39:2e:64:2b:b5:d8:83:f0:35:64:
00:fa:54:f6:59:67:e4:49:64:e0:39:6e:6d:c8:2f:86:c8:e3:
d2:7b:f2:39:a1:a5:aa:a7:12:b5:29:05:03:d5:48:c1:2a:74:
f1:55:38:dc:d4:05:32:a2:fe:62:00:14:fb:fd:ad:d5:c4:21:
e3:67:c1:8b:85:ae:b9:d3:21:77:43:ff:02:1e:71:ce:27:0c:
d6:2a:a2:0b:ad:48:89:3b:25:3f:ce:7b:88:9d:65:ae:ae:b5:
0e:e9:07:6d:58:b2:d0:54:d4:58:7e:a5:35:ff:44:63:2c:41:
12:62:b6:6b:df:09:12:cf:53:7b:0a:1e:d7:57:40:da:c2:df:
82:c4:e9:0c:52:d0:18:b2:0b:ff:c4:dc:92:9d:d5:3a:22:44:
6c:9c:88:26:67:3e:aa:1d:16:42:0d:e7:c0:83:51:20:23:32:
9d:38:d1:b0:1e:ed:14:ec:4e:9c:34:6b:a5:e6:12:ac:be:5b:
65:1b:ec:4e:c6:27:d1:e5:42:00:f8:c7:bb:e4:cb:c2:b1:87:
95:4c:00:de:01:e4:1d:ac:ec:b7:8f:0c:25:aa:d1:ba:c6:37:
cf:d4:36:0e:b1:7e:0b:5f:53:d0:4f:e8:ad:b7:ad:34:ff:60:
ac:42:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 10:04:28 2024 by rpki-client on console-ams.rpki-client.org