Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer (raw, json)
Hash identifier: VPQjExyMDiqctQbNKMoiOZ+13gPz+CX0G238rAK4YhE=
Subject key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE195D342F86FD9759E1BE4DB2FB4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50379
IP: 195.191.60.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:19:5d:34:2f:86:fd:97:59:e1:be:4d:b2:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:87:6b:eb:d6:43:74:65:1f:4a:e5:0d:0b:
b6:1d:01:60:b2:93:f5:54:e9:f4:13:d0:50:dc:b8:
8e:b4:1e:16:37:f5:9b:92:b8:57:18:0e:f4:99:16:
e1:ba:de:b4:aa:2e:69:ac:9c:57:db:e6:03:60:6f:
95:68:53:77:a8:f1:95:e5:8d:88:e5:4f:cb:75:e5:
9f:3e:f9:2e:59:a0:20:a4:c3:17:a1:8f:c9:0d:87:
8d:c3:d2:83:e3:a4:8e:d7:bb:d0:3c:eb:26:0e:92:
d4:f3:68:06:e1:d6:e5:ee:5c:f8:cf:25:57:9d:4b:
12:ff:22:7c:e5:e9:ae:30:27:fd:17:17:63:79:7d:
a5:09:f8:85:a7:4e:cf:a3:bf:69:2a:65:9e:50:ba:
f0:3f:e1:b4:6f:43:90:aa:6c:b6:8f:80:9f:7f:4d:
33:24:9a:60:bb:9f:37:e1:46:11:f9:09:95:60:62:
e7:88:45:16:b4:92:00:e5:b8:7e:a3:2e:ed:28:b8:
6f:54:90:2f:4b:a6:fa:2e:fc:83:0b:ef:2c:5c:cd:
80:12:d1:93:3f:cb:de:01:76:7f:b2:17:d8:ce:38:
55:e9:f3:11:5f:ce:09:74:9e:4a:0d:45:33:b4:5d:
4e:d2:62:00:3d:48:ea:43:3b:0a:e2:18:f8:00:67:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.60.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50379
Signature Algorithm: sha256WithRSAEncryption
9e:17:15:f6:b0:b6:2f:82:80:85:a8:d6:8d:d5:37:bb:33:99:
92:e9:68:c6:c9:a6:bd:13:e5:d8:ab:36:1b:93:5b:91:a0:04:
73:02:0c:14:6d:93:cd:38:35:f2:8e:65:7c:9f:ff:98:74:0e:
6b:80:b2:53:63:6a:db:14:ac:98:aa:9b:51:04:b8:ab:ba:e6:
f7:03:9a:e3:ac:b7:13:6e:28:c7:72:ca:af:62:2a:73:92:95:
cf:b2:a7:9e:89:20:5f:fb:e1:49:58:a0:f4:f2:f9:40:9d:56:
cb:6f:ac:51:87:6e:09:c0:b0:aa:63:1a:f2:bd:d1:7b:f8:22:
c1:e5:80:c6:d6:35:f2:4e:1e:d3:b2:67:d5:7e:45:bb:ea:e9:
06:f2:4e:c9:97:0e:60:8b:74:5d:35:c0:fb:c7:ab:e0:17:8e:
18:03:9e:1a:5d:ad:27:1f:f6:19:59:88:5a:f3:4e:84:6e:55:
5f:f5:9a:5f:cf:33:ca:9f:81:be:8d:fc:88:6b:9f:1e:bc:95:
9e:da:a9:3a:35:eb:a5:a6:23:70:2e:7f:82:f0:0c:1b:ff:1d:
53:5e:1e:66:4e:d1:bc:b5:ba:f4:19:d2:52:4e:a5:fd:c6:c4:
bc:42:d6:0b:f8:bd:17:28:2e:a5:3b:f5:70:54:f6:d6:d2:74:
00:67:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:52:59 2024 by rpki-client on console-ams.rpki-client.org