Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.cer (raw, json)
Hash identifier: E+IEzJrqTKn48PAle9y27kzwM9hqWEf3ethtkfHtiYY=
Subject key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B51A1E18AA0C0B66287F6F5FC388D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62211
IP: 185.43.228.0/22
IP: 2a04:9780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:51:a1:e1:8a:a0:c0:b6:62:87:f6:f5:fc:38:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:73:c5:ac:1a:f1:d2:cd:73:a1:e7:6f:a4:
8e:12:f1:6c:9a:aa:d1:9c:24:6f:44:30:ce:10:27:
7c:df:b2:30:0a:cb:16:80:2a:de:71:12:e3:32:aa:
4d:db:8d:33:2d:bd:cd:67:da:10:9e:1c:f5:10:43:
8d:76:96:85:22:a9:93:8e:ef:68:eb:d2:36:88:61:
23:89:ba:b0:e5:b9:b3:02:33:7a:c0:af:c4:4c:e6:
df:35:37:0b:d4:f1:1e:10:69:0a:19:60:2e:26:e2:
e2:e6:ea:d1:56:5a:bc:3f:fe:9d:0c:1c:47:aa:07:
e0:f3:e3:e9:8a:c0:d3:54:35:17:14:b2:78:0f:84:
31:52:7a:ca:15:dd:69:f6:17:8f:45:70:1b:0e:1a:
f0:b0:aa:33:8f:e6:a8:53:15:36:12:5b:5f:85:67:
86:61:f5:c5:61:0b:f1:75:4a:91:b1:e1:fb:7c:1b:
52:73:99:2a:cf:66:78:39:ea:06:9a:f2:75:4a:0b:
f2:74:a8:55:8b:6c:46:e7:5f:7f:fb:17:de:ae:24:
46:0d:1c:22:6d:2d:dd:a4:df:cf:66:90:80:c0:34:
71:9d:f6:a2:92:96:b3:f5:c5:44:3f:7f:29:7a:fc:
b9:b7:20:37:b1:b3:a0:19:c4:1c:f7:0a:47:49:d7:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.228.0/22
IPv6:
2a04:9780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62211
Signature Algorithm: sha256WithRSAEncryption
85:2d:22:7e:80:02:25:03:fb:65:29:61:14:70:06:db:54:d2:
11:1f:26:f4:ba:78:33:a3:8d:18:52:ae:de:c2:9b:ad:03:e0:
e8:54:24:1c:f6:84:9a:52:b5:51:6e:41:08:b3:06:08:40:d6:
f9:6a:fc:a7:fa:cf:47:c6:7c:12:1a:fb:41:fb:af:ab:d3:35:
a0:80:2a:76:85:76:a9:07:d0:7f:6a:1f:c9:ea:2b:72:55:78:
c1:cc:2b:e4:df:ca:71:43:21:d4:54:80:17:e1:b7:39:d9:08:
b2:dd:da:25:ea:63:d8:40:35:ba:ba:d2:36:10:55:10:df:fa:
71:3b:45:89:32:6d:ec:a8:21:ab:93:3a:d0:a1:c8:d3:3b:9a:
c2:ba:21:28:3f:74:7c:d0:4e:20:84:47:0c:94:92:50:82:5f:
22:7d:e9:f9:57:95:8d:56:e9:37:4b:db:a9:51:c8:f1:e3:fc:
3e:23:59:13:1e:25:0a:aa:e9:2c:12:e2:32:63:77:ab:96:fc:
de:69:43:c4:52:9d:a8:b4:01:d2:86:fe:f0:d3:86:74:0e:c0:
c1:8c:d7:eb:19:af:66:c7:26:be:87:6a:24:c3:05:10:52:81:
85:9a:a8:72:95:a1:2b:0f:72:ae:42:b9:b7:04:9f:54:ce:97:
1a:81:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:45:59 2024 by rpki-client on console-ams.rpki-client.org