Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer (raw, json)
Hash identifier: GLASpsS1l43jzrFoLRKf9BJbBF78Feid1eFdtcTo9S8=
Subject key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72940B823E7702E1A48FEE688BE62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204249
IP: 185.37.160.0/22
IP: 185.54.164.0/22
IP: 2a00:f7a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:29:40:b8:23:e7:70:2e:1a:48:fe:e6:88:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e97656f22015589ff7cc66056867f605d81449bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:37:e3:24:92:85:8a:94:97:3c:30:3d:63:
27:d0:c0:2e:f6:68:63:e5:7d:0e:8e:f4:3a:dd:a1:
c0:09:9e:ef:26:d4:33:ce:4d:91:ca:d8:c6:39:88:
35:41:0e:14:9e:16:3c:0d:2d:c7:26:dc:1c:45:58:
bc:81:f4:da:c0:90:07:f0:62:8a:09:e1:26:e3:fb:
63:ce:e1:87:bf:4f:79:f4:b0:85:df:4d:8d:f7:86:
20:22:4b:3a:6d:55:c3:25:14:89:31:d7:99:4b:a9:
7f:ed:ba:f3:d0:c6:d0:f3:e4:98:75:86:e2:ab:08:
4a:2e:3f:e3:9b:5f:23:59:ce:ad:41:35:6f:4a:f0:
f4:52:d3:7d:09:8a:a5:97:ea:59:a5:89:83:16:28:
6a:6b:12:73:7e:64:0a:7a:f5:75:00:d5:e2:66:d2:
1e:4d:6b:37:a4:db:b8:cf:17:98:22:75:19:3e:f8:
d8:8c:a3:c2:cb:63:ca:c5:4b:f2:46:c2:0a:c1:2b:
30:5d:bf:d7:31:39:f5:ff:90:97:ec:0f:1b:b6:30:
d0:13:b6:13:47:c9:62:f2:35:90:9f:02:09:24:6f:
a6:72:a1:4d:10:df:b9:a0:b6:f4:8b:f9:68:19:3f:
9b:65:63:61:f3:d9:d0:2c:2d:33:ae:e0:9a:0c:46:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.160.0/22
185.54.164.0/22
IPv6:
2a00:f7a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204249
Signature Algorithm: sha256WithRSAEncryption
9c:aa:eb:b8:2a:0d:d6:45:9d:76:47:01:e4:24:d8:6c:da:5b:
4f:c8:bf:45:09:17:a3:ae:23:91:41:a6:a1:62:24:52:71:a1:
af:70:1c:73:66:9b:39:14:7d:57:f6:22:84:57:8b:90:d8:f3:
82:de:33:07:fb:25:17:aa:de:4a:46:41:6a:3d:66:3c:e9:e7:
a6:ba:4b:d0:87:34:a9:c6:93:ea:d9:43:c2:1b:ad:ed:8b:f6:
e7:cd:6b:56:28:4b:d8:a6:36:de:14:c1:8b:4d:04:7a:c2:11:
ca:f7:8c:cf:a5:5a:eb:e0:16:70:3d:eb:5e:9f:49:c2:64:1e:
a8:5b:18:6d:4f:31:1c:fb:c3:3b:5a:74:d7:dd:dd:2e:76:98:
b7:5d:f5:9d:89:e6:58:ed:64:36:db:81:6c:56:9a:1e:c7:61:
dd:17:bf:bc:51:ca:dc:e8:a3:39:e3:4d:ef:00:04:7d:4b:fe:
cc:64:cb:36:d1:73:33:46:b9:2f:51:31:b5:aa:f1:4e:74:6a:
40:b1:b6:34:e2:8b:23:5a:5d:0d:69:eb:bf:1f:bd:45:f2:c5:
a6:70:4d:e8:21:63:88:96:ca:45:22:3b:89:b2:41:49:63:0f:
a4:97:3f:da:c9:76:0a:d9:c6:cb:f8:66:60:67:70:24:8e:96:
95:6b:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:33:00 2024 by rpki-client on console-ams.rpki-client.org