Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.cer (raw, json)
Hash identifier: rCOw7esg72q9EVUQohoLZRZRBfpF6RMtrwOZ3T8Mtl4=
Subject key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A0CE5D1CD2AD4DDEB0EE6A215A608
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 52140
IP: 46.255.216.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0c:e5:d1:cd:2a:d4:dd:eb:0e:e6:a2:15:a6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:4f:e6:39:68:74:8f:01:1b:ac:99:dc:cb:
98:9d:2b:5c:8f:7f:5b:2c:73:9c:2a:55:56:c7:a5:
48:af:59:85:2c:a2:50:14:26:6b:9a:2b:fe:e5:b0:
5c:41:94:bf:d9:70:99:02:a1:d1:b7:50:17:d5:64:
e7:2e:4c:31:11:f7:86:40:6e:2c:82:36:02:da:a6:
af:69:ff:de:78:63:5d:57:4e:a6:45:6d:7d:f1:65:
d4:46:d3:66:f1:da:98:d1:d2:17:b6:84:64:3e:ff:
93:66:42:bb:c1:77:72:78:59:61:6c:d9:eb:d1:ad:
54:fa:61:6f:7d:dd:1e:5c:16:14:44:ec:9e:64:ea:
e2:b1:a7:35:0f:95:60:72:db:53:05:cc:90:3c:da:
fc:d5:03:59:55:89:e4:5d:4e:c5:20:d0:f1:d4:02:
ee:13:da:05:d3:b8:78:14:c9:b2:a5:8b:75:82:94:
75:54:02:86:05:14:6d:13:63:1b:44:82:94:b4:1e:
9f:31:f2:42:3b:df:c6:bd:e3:00:e2:ff:1f:10:36:
f5:39:62:3c:96:24:8b:4f:f0:b2:fe:3e:f5:dd:61:
28:b4:70:1a:13:02:c6:6c:cf:9d:ad:fc:82:e7:8d:
a8:2e:45:1f:15:75:c7:1c:06:74:d4:e7:41:fa:ba:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.216.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52140
Signature Algorithm: sha256WithRSAEncryption
16:58:25:63:96:a5:aa:d0:51:0d:11:0d:5d:54:81:68:bb:b1:
92:cc:b0:0a:8d:ff:6d:b0:9e:7e:0b:38:39:46:a5:95:62:e4:
0a:5b:c4:00:38:32:ea:5f:b2:9d:2b:82:4e:76:b8:ff:57:87:
cd:74:5e:42:be:6f:1b:9a:26:60:88:83:bb:f5:b7:55:23:f3:
23:d0:fb:f5:2e:6f:49:b4:73:b0:06:f0:d5:80:79:1e:d7:06:
a2:15:05:b3:ea:86:17:70:f6:d7:65:07:8c:c8:2a:3d:10:33:
d2:61:ff:6a:6e:2b:30:b3:e2:f0:d6:0c:bd:75:da:08:0a:4f:
34:8d:39:22:61:e1:7d:e1:98:cd:70:4c:39:67:e4:61:21:19:
b3:82:7a:1c:5f:8d:c0:8d:91:51:f3:fa:d0:6d:68:75:be:89:
e1:83:31:17:07:a3:bb:1a:cd:70:b1:79:87:93:44:1d:71:91:
57:2f:58:f9:c1:b2:d8:0e:ef:12:3c:d9:42:c3:27:7d:53:08:
85:b2:40:ed:48:aa:6b:d3:30:8f:bd:d8:80:f8:c5:58:9e:36:
a7:53:84:a9:3e:ba:fa:fa:88:0d:77:9a:3a:0f:db:b0:25:2c:
e2:f9:82:97:2b:9c:b9:cc:c9:e6:91:ab:07:de:25:40:2a:72:
9c:db:59:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:09:24 2024 by rpki-client on console-ams.rpki-client.org