Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
File: 9wC7WRwCd4gZrqH1uPZEFns9fC4.cer (raw, json)
Hash identifier: QiiThMNv9Ib1H/VJDyrnVWg8t/vkwRXhI2fyVyG+qkg=
Subject key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42543916732FF191ABE7BFCDFEC63FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209031
IP: 45.9.240.0/22
IP: 2a0e:1900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:43:91:67:32:ff:19:1a:be:7b:fc:df:ec:63:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:19:f1:37:f3:83:9a:36:9b:11:1c:38:5a:
1d:a8:82:fe:0f:7f:57:ce:9d:16:1d:b2:0b:f3:59:
db:9c:85:46:a0:10:15:4d:70:f2:85:f0:b3:05:6b:
65:3d:22:9b:b2:76:70:a1:4d:ad:37:5d:73:40:6e:
b0:85:0f:80:1a:9c:a9:d1:df:5f:fa:13:af:6e:c9:
2c:73:7b:9a:62:88:74:91:81:03:f9:21:91:09:b7:
30:b8:b7:b7:11:67:3e:ac:a7:44:93:e5:a1:5f:c5:
fa:4d:5c:98:ae:0f:9d:88:81:38:d3:f2:19:ea:50:
2e:86:a4:73:3f:0f:6c:b0:0b:b7:8f:ba:ab:49:3f:
5f:67:6d:75:64:0e:6b:a6:62:19:90:db:25:7e:c5:
96:87:4a:ed:69:cb:a6:56:8e:81:42:19:6c:ce:5c:
eb:86:bc:c0:45:50:ec:22:70:9e:fa:10:8f:8e:c7:
07:26:30:07:ed:2d:5b:59:11:d7:72:c4:b1:57:20:
bd:f5:6d:f5:86:6d:4c:00:70:cb:2c:c8:5e:c2:42:
b2:bd:3a:dd:12:f9:d9:bf:f6:79:8e:42:44:36:51:
8e:8a:c0:41:1e:61:37:c8:b9:1f:35:74:99:dd:bf:
50:8a:a5:56:2d:ae:ce:e5:28:a8:4c:da:12:46:8d:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.240.0/22
IPv6:
2a0e:1900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209031
Signature Algorithm: sha256WithRSAEncryption
9f:02:9d:85:98:3d:5f:9a:8e:74:b2:dd:fc:86:fc:ad:96:c3:
6c:ca:00:7e:20:f0:3a:bb:84:a2:33:01:86:98:bc:16:ff:22:
17:d0:db:48:78:f0:2b:e4:50:9c:56:7e:b0:b4:d4:bc:0f:a9:
88:32:4e:33:cf:ad:08:16:ee:8e:e5:78:2d:0d:84:7d:b8:03:
15:c6:49:fb:8f:a4:d8:9f:8c:7e:f2:67:23:9a:0f:7c:7b:15:
e6:db:15:15:b3:be:40:e2:a0:02:c1:e7:60:ff:d3:fa:82:17:
44:c6:23:1a:e4:73:79:ef:1f:e6:d1:a6:32:16:d1:c3:ed:d4:
da:3a:56:54:85:d6:ab:65:57:ca:19:25:d4:cf:26:98:3e:be:
39:a4:24:2d:e5:37:c2:72:ce:c1:c1:17:de:8c:98:2a:8b:87:
08:02:84:c6:bd:93:bf:93:3a:a1:3d:f0:2a:1a:f4:c0:09:10:
60:1f:6e:97:a2:37:f7:d9:8e:ed:c7:22:99:c4:8f:65:60:67:
f7:e8:c6:9d:ce:e1:d4:20:31:17:76:e2:c1:55:c1:ce:b2:ee:
e4:83:58:e1:a1:7b:d6:cc:ed:2a:01:fb:0d:80:99:db:1f:e0:
46:f7:86:1a:08:91:57:3f:a3:6f:6b:56:e8:d9:82:20:95:05:
53:a8:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:17:46 2024 by rpki-client on console-fra.rpki-client.org