Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer (raw, json)
Hash identifier: lqP6Xuqb6ykndPxFHnUQVa2IhUhDpqC19S84Xx9fDfk=
Subject key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D470D4101B73405DFCE0230046951
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208906
IP: 78.24.232.0/21
IP: 2a0d:8f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:0d:41:01:b7:34:05:df:ce:02:30:04:69:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:a9:0d:cd:c0:cb:8b:cc:86:82:39:e7:81:
1a:61:26:33:91:3d:62:ab:37:91:82:c9:13:83:2e:
02:92:96:60:a0:7f:08:5c:be:15:c5:9c:f7:e0:21:
a4:e2:b0:25:a3:06:be:d1:f4:a8:bb:c0:98:22:ab:
94:ce:de:72:9e:65:b6:2c:c5:d6:6d:c2:40:eb:dd:
db:54:86:27:12:49:55:c4:ad:1b:68:ac:de:6f:47:
6b:7d:61:bd:d8:f3:e8:95:47:d2:45:9f:4e:98:d6:
4f:c5:b4:9b:a1:36:6f:11:4e:50:b1:7e:b9:d9:37:
bd:81:3c:08:8c:2f:47:f2:e7:93:d0:28:35:82:5d:
2d:d2:00:fc:f2:57:56:30:a1:5d:0e:9c:8c:ca:d1:
29:40:ab:fa:8f:9b:8e:d0:9f:44:72:2f:28:97:2d:
d6:fd:eb:0d:30:f1:f1:17:6d:96:ae:49:50:f7:f7:
7f:db:29:c3:f8:b0:ae:f1:1e:b3:0a:1e:8e:de:a9:
ef:e9:77:90:0f:56:9b:d3:17:9c:d8:d8:97:98:2c:
06:90:4a:55:a4:ea:6d:6a:03:0a:f4:9d:84:c5:78:
07:ed:46:a9:e6:10:29:f7:3a:69:2c:05:62:68:c9:
1e:1d:37:d7:45:e0:5d:63:35:52:e5:c6:29:91:f3:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.232.0/21
IPv6:
2a0d:8f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208906
Signature Algorithm: sha256WithRSAEncryption
4f:c3:9b:90:50:fe:d8:83:8a:36:ec:c8:0d:78:95:f6:8c:4f:
63:4c:5a:0b:d5:19:c1:9f:25:7c:98:c4:fb:f4:8d:3e:27:b2:
df:c4:b8:d5:d2:85:aa:01:fa:82:6e:c0:43:83:54:35:be:0d:
a5:15:11:3d:cf:76:08:f4:59:cf:d0:ad:3f:6a:2e:f0:fc:b5:
96:5c:ea:0e:4d:f5:be:9b:6e:a6:0b:ee:e4:62:05:37:b8:11:
4a:37:66:ff:2d:d1:d4:f6:31:e3:b0:e3:0b:8c:68:c4:54:e6:
f7:33:7a:89:74:6b:74:60:7e:24:fe:38:99:69:48:9e:f4:4e:
e7:d4:9a:08:7c:8e:a1:7b:7e:37:e0:64:a4:91:4c:33:12:ca:
f8:01:f4:af:97:45:ae:00:29:c0:9b:53:98:2e:40:34:78:86:
67:6d:94:a5:b8:cf:4d:21:6d:0d:c5:a9:10:bf:30:93:d0:27:
b0:66:60:7b:79:72:4f:df:8b:cb:cf:59:b3:3f:6b:6f:a0:86:
f2:34:94:d9:91:42:ee:6a:53:ac:6c:2a:59:d4:24:a9:b7:38:
25:f8:fd:00:78:f8:c8:6f:c2:88:87:17:41:83:ca:52:b6:a3:
dc:7c:57:47:64:a8:c3:d2:8c:cd:4d:d6:7d:46:9d:52:1b:b3:
14:ed:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:12:08 2024 by rpki-client on console-ams.rpki-client.org