Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
File: AJEXecdn0jZOhvTifvjF_puwEJA.cer (raw, json)
Hash identifier: 7ML4aQ0IfT0w9eYupnjYzFyidH7Ar8GVgHajl1BQi9M=
Subject key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424486B34B22A27ABE5484B6DA06FA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198867
IP: 5.45.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:48:6b:34:b2:2a:27:ab:e5:48:4b:6d:a0:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:09:d2:24:d2:36:70:88:23:63:b8:d6:5f:
94:03:6e:2d:2d:78:6b:ee:2f:93:0f:9e:07:40:f3:
0a:12:ee:15:7f:61:43:23:56:c9:a6:20:44:b3:ad:
f7:43:44:69:05:85:51:65:26:0b:2d:24:34:c1:16:
3d:57:e4:06:a1:62:21:0f:38:76:d1:0a:36:8a:be:
c3:35:3a:0f:40:0d:41:27:35:3c:d0:27:9e:51:40:
cf:17:f4:dd:69:40:65:30:77:99:3e:ad:e5:53:61:
d3:bc:68:3b:08:7e:b7:ad:f7:0c:d0:b3:01:7e:80:
ea:e4:f2:b4:d9:67:4d:1a:cb:92:c4:98:c4:3a:7f:
c5:22:a5:b1:67:91:6a:a0:09:31:1b:46:2e:0b:6a:
80:fb:d1:27:55:ca:99:f1:1d:6d:a2:3c:8c:bd:89:
b3:b6:bb:d1:ae:bf:98:60:65:99:3e:f5:b5:b3:f9:
1a:85:d7:62:55:68:01:a4:de:eb:83:8a:5c:eb:ff:
ad:fc:26:ea:3a:41:e5:c0:5e:56:d1:3a:45:9e:c6:
ee:65:9b:8c:d9:1b:0c:69:3c:e2:81:ad:ad:5e:12:
ab:fb:4d:96:90:75:aa:18:4d:b0:8d:94:d1:e8:1b:
13:2d:9d:d5:c2:33:11:4a:d8:f2:da:57:dc:73:fb:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198867
Signature Algorithm: sha256WithRSAEncryption
04:8b:99:fa:b6:15:d4:2a:37:95:d2:f0:dc:96:e1:04:9b:92:
e0:ed:65:9a:91:7c:37:0f:ba:1e:9e:6a:4c:4d:67:64:37:db:
79:8c:4d:e0:da:6f:1e:af:56:42:13:6e:1f:ae:ea:b1:fd:02:
94:cf:d0:6c:7d:0d:30:bd:ab:a7:20:32:47:35:33:b7:23:a4:
d0:e4:33:c6:5d:00:eb:8d:8a:f1:ae:0e:c0:c4:e2:39:9d:2a:
be:8d:95:18:33:05:54:ef:eb:e3:26:1c:bb:c1:1d:9b:fa:5c:
bf:bc:e0:f2:e5:86:f8:1f:e6:89:e0:81:b3:1a:6c:4e:b1:a7:
fc:aa:7e:36:80:09:a3:0d:fc:1e:77:46:42:eb:33:2c:81:b1:
58:cc:ab:e2:a4:00:f2:27:ee:23:a2:b1:08:b7:c7:3e:dc:8e:
88:35:53:59:b4:2f:07:30:47:57:3b:94:51:3e:19:67:b4:db:
74:3c:7c:aa:db:ec:de:e1:74:56:aa:e2:34:54:f5:85:ea:42:
a1:93:e0:ef:fc:bf:99:b5:79:1a:0d:78:bd:9e:28:52:0c:29:
be:a3:a4:e6:5c:55:69:37:7f:14:15:22:e2:a9:94:3c:83:1c:
6e:d5:cc:a5:56:c8:17:5a:4c:fa:59:3a:54:98:d9:03:54:c9:
09:89:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:42:21 2024 by rpki-client on console-ams.rpki-client.org