Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
File: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer (raw, json)
Hash identifier: +TrnqjDh/7C7kY6RoZseYSD2CKCLw+Uej1DxrrhhJlw=
Subject key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DF3B2E2887BB50D7175DF606EA5DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49556
AS: 207724
IP: 158.255.78.0/24
IP: 2a13:5ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f3:b2:e2:88:7b:b5:0d:71:75:df:60:6e:a5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e938f9182b7da44003591eeae2560f8451b3393a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:37:32:4b:70:22:11:e8:86:d8:57:95:f3:
00:7f:e7:be:f9:55:46:e7:b9:2a:31:81:fa:a0:d3:
32:5a:37:a2:ad:b5:10:aa:c8:94:e3:c2:3a:59:b6:
f7:27:29:75:e5:63:1e:c3:e9:59:89:91:0a:4c:58:
50:1a:30:92:33:9b:33:c1:35:81:11:cf:99:a9:8d:
e0:88:b4:d0:86:37:6d:52:cf:6d:8c:ff:6d:1d:01:
d0:32:eb:39:1f:aa:6d:01:96:f5:85:40:b5:16:f8:
20:80:12:38:7c:27:f6:f0:0d:3d:b9:19:79:87:3f:
ca:06:d1:ad:43:e6:0b:df:94:fb:0f:4e:1a:83:6d:
94:07:17:d6:4a:82:73:e1:bd:9a:9d:f8:44:f0:e4:
df:8b:13:e0:f1:be:56:26:98:84:66:ec:09:ac:cc:
bc:ef:10:56:7f:ae:43:17:ff:1d:fb:d2:73:2a:9c:
13:89:f0:0e:a5:01:de:4e:35:86:a0:5c:e6:86:59:
e7:c6:89:50:37:76:9c:7d:ab:17:69:3a:df:37:c2:
5c:51:44:6f:9e:83:bd:4f:d2:21:3e:fb:0b:40:0a:
e3:fe:4b:8b:a9:fb:a3:e6:64:83:ee:6a:d1:47:af:
86:de:b7:f2:5a:f2:c8:cf:74:bf:fd:1e:70:8a:cb:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.78.0/24
IPv6:
2a13:5ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49556
207724
Signature Algorithm: sha256WithRSAEncryption
36:e3:68:ee:b5:c0:87:17:ef:d5:8d:94:f3:d2:69:c8:9c:99:
ac:a1:cd:8d:3a:53:26:56:4a:d8:3f:41:c8:dd:2a:bb:16:0c:
26:6a:02:4a:ff:fb:9a:07:3f:47:2e:13:f0:ca:7b:e8:1b:bb:
bc:da:13:61:6d:ff:d6:e0:16:e5:09:cb:d2:57:4e:0a:ad:3a:
66:5e:3e:ae:9a:7f:87:e6:64:e8:e5:24:04:2f:dc:b4:a8:47:
f3:b5:98:21:8a:6a:be:30:ee:1a:3f:3e:0d:d1:01:b1:78:93:
65:8a:0a:44:c7:a3:86:a2:0f:2b:0e:c1:93:60:81:fa:7a:e4:
b7:be:06:97:e7:a3:4b:fd:3e:ff:c2:85:15:76:e1:9e:ba:05:
4f:60:4a:e6:45:73:7c:c0:97:21:bd:9c:f0:7a:dc:3a:86:d6:
21:3c:c0:38:a1:6f:87:65:2f:37:50:ed:b3:37:20:d9:c9:8f:
7c:1e:00:fc:47:f2:a4:26:3c:b2:06:c1:64:32:84:42:71:4c:
f7:f0:05:dd:ce:7a:2e:97:e4:c2:a8:02:e8:dd:1b:c4:fd:92:
01:a8:52:95:d9:b8:a4:32:26:d4:3d:ad:f9:3b:2a:ef:cf:ce:
06:0e:8e:c4:dc:27:32:42:e9:6f:24:45:48:bd:da:3b:44:90:
a4:a2:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:26:03 2024 by rpki-client on console-ams.rpki-client.org