Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.cer (raw, json)
Hash identifier: c9KrB7/IVLM+IPzmesl5GIylCNl2wY5TIwOVhJV9HRw=
Subject key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01916A8DE75A305B8F7E8499C65134E4068F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Aug 2024 12:12:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215573
IP: 46.245.233.0/24
IP: 185.246.176.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:8d:e7:5a:30:5b:8f:7e:84:99:c6:51:34:e4:06:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 19 12:12:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0d444bc7d5334da14de805172b2625e9830763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:ce:b0:c7:8d:d9:de:3b:91:db:7a:32:02:
52:88:3e:86:87:9f:be:f6:29:ad:77:86:12:ad:ac:
7b:60:23:a0:cc:91:d9:d0:39:d0:b4:3a:7e:59:ef:
ad:7a:6a:58:6d:85:c4:92:19:39:21:6a:b3:ef:1c:
90:e3:c4:b8:53:27:67:cf:18:e4:77:34:b2:b2:24:
73:1e:70:d6:04:d3:91:fc:7e:b3:ed:a8:78:f3:ee:
e6:3f:fb:1f:31:19:47:23:b3:71:4b:49:21:1b:1c:
fb:8b:d4:95:ad:9a:fa:f8:14:98:ee:73:9f:c5:e7:
71:6f:b7:48:c0:4e:ad:71:f8:5b:30:af:97:d1:a0:
fb:39:cb:39:cb:d8:80:50:4d:da:10:d3:fd:bd:77:
91:98:ef:30:c1:ae:d2:79:29:45:68:76:90:ea:e5:
9a:71:2b:6b:83:02:1e:66:ca:f1:77:99:3b:3c:0b:
87:0a:f1:f1:fe:dd:22:87:c0:dc:8e:51:8a:9d:8e:
84:10:1a:12:10:a4:0a:3b:53:96:54:1d:a2:e1:d3:
b6:cf:3e:17:69:4c:be:13:dc:4a:11:80:10:16:89:
c3:e6:45:80:9d:d5:fb:38:a1:5b:80:66:51:97:14:
3c:aa:d4:a7:45:85:9a:10:3a:f9:ba:da:ff:a5:40:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.233.0/24
185.246.176.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215573
Signature Algorithm: sha256WithRSAEncryption
89:b5:21:38:4f:ea:04:28:8c:b2:ec:ff:1b:f3:c2:66:b8:d8:
c0:de:8a:49:26:4d:87:8e:0a:cf:8b:e3:51:7b:db:c8:98:dc:
12:ad:50:9a:5f:d2:3e:bb:e7:01:d7:50:e2:8b:09:b3:7d:73:
27:5f:a7:0b:42:8b:29:56:13:30:37:70:5f:07:17:09:83:fd:
54:10:14:8c:a8:51:b1:a3:87:61:cf:fe:12:49:dc:a9:d6:b1:
11:15:24:fc:91:d3:02:17:db:12:22:fd:4a:59:f6:e3:ce:91:
8f:9b:03:6a:d4:0f:56:aa:68:d8:fd:cf:b3:ac:d3:4c:06:1e:
4a:af:b4:08:52:cd:f7:73:c2:2b:87:27:32:9c:0a:b3:1d:34:
c4:20:ff:4c:3f:36:ad:a4:c9:16:a4:b7:f7:91:2f:56:0c:4b:
1d:b8:ac:a9:19:53:05:8f:72:91:33:1c:0e:0e:71:d4:46:cd:
a2:88:8b:5c:56:c9:5a:62:bb:38:2f:d9:ac:23:df:e4:c9:cc:
62:21:33:8a:cd:60:84:a4:d3:8b:51:6c:7d:c3:1b:e2:a4:e3:
bf:4a:48:9d:36:c0:66:b3:c5:32:84:6e:87:52:8d:30:b1:3a:
60:c0:9b:c1:32:bb:8b:cc:30:23:62:3a:41:19:0b:38:2c:06:
da:ce:fb:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:13 2024 by rpki-client on console-ams.rpki-client.org