Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
File: AYJcep4nAba6NnDQjSoQqeoV0-M.cer (raw, json)
Hash identifier: Dvu4QWN4S/U7E5Eqs8hnJNdb6xGCGvLBXYeZHc2NQMQ=
Subject key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B46294D66EAE64364C203EBAFC67F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203940
IP: 185.119.128.0/22
IP: 2a06:8a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:46:29:4d:66:ea:e6:43:64:c2:03:eb:af:c6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:db:98:08:ce:79:cb:8c:9d:f3:3c:f3:d6:
d7:a2:3e:63:c3:00:e6:47:2b:86:61:ab:32:c0:c2:
c4:2e:08:e4:52:1e:06:09:ce:a3:53:30:50:71:48:
8d:10:46:0e:fc:4d:88:32:84:1e:18:43:6e:ab:ac:
b3:45:9a:a5:13:02:19:9f:f0:32:6e:c7:87:e2:3c:
89:e7:48:a1:63:39:de:59:3d:c6:c7:3d:e5:fd:13:
47:59:3e:7b:fc:c8:fb:2d:82:52:ab:10:fe:88:b5:
73:af:58:3f:51:37:1f:42:d4:00:4e:85:cf:b6:a2:
2a:47:bd:77:52:1a:ab:e6:be:98:93:3a:c7:5b:0b:
56:0b:4f:2c:b4:89:ab:4d:79:33:ff:21:bf:32:01:
84:27:56:67:ec:28:e3:20:bf:b2:e7:7c:3a:8c:c9:
11:ea:aa:6d:62:d9:f2:31:41:47:2b:84:31:04:99:
33:35:b9:20:b1:46:af:0e:44:21:89:6d:83:a9:f9:
99:4b:bb:71:64:94:4c:ad:f2:5a:b8:24:13:bf:36:
b8:b8:df:96:a2:70:49:65:80:b9:7a:e1:93:88:11:
8e:72:eb:48:49:51:77:9f:d8:cd:d5:17:72:f2:a3:
e7:78:90:61:98:e9:c6:5e:78:dc:d7:ad:0c:44:b1:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.128.0/22
IPv6:
2a06:8a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203940
Signature Algorithm: sha256WithRSAEncryption
2b:ae:86:9a:ef:66:9f:ce:77:9c:60:45:e3:88:ed:ef:0a:96:
37:3e:ad:10:b7:b0:5d:4f:2f:54:90:c9:52:f8:92:6f:16:eb:
49:f5:5f:7f:39:80:df:51:e4:31:6f:1a:12:1e:e4:16:3f:bb:
14:c9:13:b3:a7:05:3d:47:7a:b9:54:3d:b2:a0:c2:33:70:48:
62:09:57:22:31:70:58:1f:0b:66:fd:d3:ef:70:98:af:93:6b:
c2:a3:27:c0:f9:18:d0:a0:dc:c2:05:74:bd:9b:3d:da:3d:9b:
04:31:53:39:a0:bf:d9:23:b2:bb:6f:56:fe:66:b9:3e:45:29:
bd:bc:41:e0:92:c9:2a:4a:1a:49:1a:76:92:dc:be:b4:f4:fa:
c9:45:91:cd:a9:83:be:04:3a:53:3a:cf:43:61:74:c9:f5:cb:
95:d9:c3:7e:02:63:01:30:1e:5e:da:4c:01:cf:0a:f0:34:3c:
b5:f7:54:cc:02:93:da:66:a5:a0:01:0d:42:c6:2d:34:7f:0f:
0c:63:93:c9:76:c2:54:9f:f7:6b:00:ff:ce:70:17:65:50:8f:
c3:dc:ac:59:07:e4:d2:b4:6d:de:2e:7f:b3:96:45:23:56:a0:
ea:11:39:27:18:cc:64:07:a6:c9:99:1a:ae:d5:3d:28:e8:f7:
22:d3:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:50:01 2024 by rpki-client on console-ams.rpki-client.org