Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer (raw, json)
Hash identifier: z16CBaqA/qo6IACASA0webv3+utYO44hIp0Yv8LqCTM=
Subject key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80143C7DF5C0264B2286F802AB1E01E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57609
IP: 193.222.58.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:43:c7:df:5c:02:64:b2:28:6f:80:2a:b1:e0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:f3:28:b3:09:f5:b4:5c:75:85:ba:48:78:
9c:9a:7e:88:f2:9e:6e:64:84:83:74:39:8e:73:36:
99:5a:a3:08:21:a8:5f:3c:8d:12:e9:2f:e1:6a:1f:
90:0a:2b:c7:50:43:9b:01:1f:fc:21:7c:0a:6d:aa:
4d:0c:27:db:be:8d:43:c6:16:f4:c5:58:9d:12:38:
3f:d8:33:88:d0:20:f0:27:de:7b:92:c5:0b:0e:9a:
db:ad:a3:ab:2b:b8:97:c8:be:d4:06:46:41:08:72:
f7:0b:cd:34:5a:2e:1a:e6:fe:2c:71:65:41:e8:c2:
6c:09:fc:6e:30:48:19:a0:26:6a:f7:37:bf:f7:df:
10:c1:22:d2:ca:37:65:14:38:f9:34:29:81:37:a4:
ae:9e:b0:b2:8d:e6:03:d1:85:aa:44:d8:81:41:aa:
2c:fb:3b:0f:6b:b6:42:6b:5a:60:3e:b7:f1:2e:42:
73:8f:4b:b9:07:d4:63:25:1c:5c:ad:e7:a8:10:44:
06:4c:a1:43:0a:4d:20:c9:22:8c:01:21:14:4f:c1:
8b:94:f2:e4:28:07:5f:9d:6e:50:f4:ae:eb:74:aa:
53:c0:ff:37:4a:35:8d:66:cf:b9:7e:49:e9:b6:73:
3a:39:a0:37:d5:c1:fe:83:7e:0a:49:f0:68:01:2a:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.58.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57609
Signature Algorithm: sha256WithRSAEncryption
8f:e9:83:5b:ef:15:0e:e4:42:d4:30:c9:1b:83:a3:5d:85:5f:
3c:37:82:55:75:53:18:ff:66:fc:74:59:c7:1d:60:78:a9:a6:
c3:ad:c0:f9:3f:07:e2:99:36:b4:9d:60:7e:f5:1b:be:de:c1:
3d:0f:17:dc:81:d1:08:ad:68:7a:20:11:5a:04:a3:85:46:bd:
93:80:e9:62:f0:69:ef:e6:91:e3:61:85:3b:8c:70:0c:0a:19:
15:9f:b8:35:03:db:bc:98:14:41:4e:22:fb:9c:67:0f:d6:4c:
05:f4:50:df:50:f7:d9:5d:b3:15:41:eb:1c:a1:42:6e:d4:1d:
28:be:51:f9:b6:94:74:11:dc:45:14:c1:05:fe:07:dd:12:c0:
aa:d6:62:98:f7:e2:c4:46:6d:f9:0c:1a:59:72:3d:8c:4c:ca:
e9:f1:1f:ba:d1:4c:66:8d:15:34:ee:60:58:77:b0:aa:cc:6b:
95:07:e8:91:b9:96:c6:e2:af:2e:7c:69:09:d1:21:1e:f5:f4:
41:c5:c3:fe:c5:55:9b:e0:fa:5a:b7:c3:22:ec:4b:d2:46:03:
01:33:f5:cd:82:37:a3:37:67:55:58:2e:4c:10:1b:92:7c:72:
49:6d:74:d2:65:8d:e8:4f:1f:2d:ec:a4:ad:31:42:0b:29:d0:
09:e7:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:46:43 2024 by rpki-client on console-ams.rpki-client.org