Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer
File: ApeliZjwl0NHCBwX8l7t1l-tlmE.cer (raw, json)
Hash identifier: IVx7civmRMWSHQI/eRwlKxGviDPi1wNm3Ajt8Shuqx8=
Subject key identifier: 02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A85E4F6D78D26E9F59D8F6901B4FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198588
AS: 199365
IP: 92.242.164.0/22
IP: 164.138.0.0/20
IP: 2a00:4860::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:85:e4:f6:d7:8d:26:e9:f5:9d:8f:69:01:b4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0297a58998f0974347081c17f25eedd65fad9661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:3a:5a:c1:6c:de:41:23:01:7b:d0:9d:60:
2a:14:b6:5b:9a:a1:59:df:68:64:d2:a5:f9:a0:66:
85:48:38:46:81:7c:92:1c:01:06:50:c1:14:47:9f:
62:0e:d6:1d:4f:76:9d:ef:12:04:6f:ae:6d:bf:e9:
87:38:35:fe:7b:96:93:54:d7:2d:eb:bb:f0:ed:77:
d5:4e:ad:9b:1c:94:4a:6c:14:c1:ef:e2:b1:db:16:
48:ae:81:63:c4:92:c3:f6:3a:fc:43:c1:4b:e9:39:
14:5f:04:53:07:0a:ec:f8:ca:51:50:46:eb:21:20:
6b:bc:82:7c:5f:98:22:e7:6d:68:87:d6:88:e3:5b:
5f:40:b5:61:5c:50:30:97:fa:84:88:25:e7:d8:c7:
4a:4b:37:71:8d:98:a2:2a:67:c0:43:5d:46:f7:e5:
4a:71:8b:07:55:3a:f9:b7:93:1d:a8:df:92:66:62:
31:02:03:79:0c:a3:01:07:c0:8a:2d:66:fa:63:ba:
19:0d:22:3d:c5:ad:ae:bf:fe:b8:41:f3:7e:3a:91:
e1:6b:19:d9:7a:f8:6e:ba:3b:93:ca:29:c7:0e:b5:
28:bb:d1:9d:c3:72:7d:e0:37:b1:79:93:23:4f:f6:
3d:bb:cf:10:dd:1b:d9:18:85:bb:74:0b:30:31:c6:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.164.0/22
164.138.0.0/20
IPv6:
2a00:4860::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198588
199365
Signature Algorithm: sha256WithRSAEncryption
83:20:21:b2:e1:3f:ef:44:a7:48:af:7d:5d:6e:f8:ee:a9:6e:
75:af:b0:5c:78:c9:f2:2e:68:e2:14:42:95:c7:56:e4:8d:43:
eb:f2:89:66:7d:2d:cd:12:da:c9:52:0f:c8:43:29:97:64:38:
e0:f1:06:77:24:9e:b0:be:32:a0:5f:07:ae:67:b3:b2:1f:64:
94:2d:83:d8:f8:a5:7e:af:87:b7:ab:b7:0e:24:a3:31:81:9c:
db:7f:c0:0f:e8:3a:07:72:9c:f4:df:72:8e:33:57:6b:3a:8d:
1b:0e:5e:ef:70:e3:cd:8e:1b:76:0c:02:6e:65:0e:ca:d9:73:
c2:0d:a0:89:40:02:20:9a:f7:c0:75:74:cd:c0:77:40:a3:e0:
0f:1e:de:27:67:d8:70:90:61:7a:ac:45:c8:c1:ab:61:22:e5:
d9:65:d6:85:20:ac:df:4f:da:bf:5d:77:97:a2:67:82:04:50:
a8:b5:9a:e6:07:0e:9e:17:78:c3:16:0f:fe:da:29:fa:b8:c0:
ee:91:8c:48:dc:d8:2a:9c:aa:b1:89:31:9d:bb:38:55:fa:18:
e3:ec:4f:2e:4e:ab:33:7b:e6:77:3d:49:0d:78:1e:c0:cd:d6:
5e:07:ff:7a:7d:eb:13:56:35:73:77:37:b1:02:6c:e9:95:c4:
c2:2b:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:49 2024 by rpki-client on console-fra.rpki-client.org