Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
File: D3jqRswh1F7WEmjUqfVnMsheIVA.cer (raw, json)
Hash identifier: KN77fWIhdUhqcTNRpFcP+mS8BxQNoPsxsW/pWv/hvio=
Subject key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EF6143867457AAC66508C3063CE59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201278
IP: 188.66.28.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f6:14:38:67:45:7a:ac:66:50:8c:30:63:ce:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:7c:3b:2e:a4:dd:16:15:e4:3d:7d:7f:1b:
0c:26:ed:dd:0b:8e:e0:1c:0d:1f:c1:6b:bf:63:e8:
e2:a4:2e:ab:e2:b7:4e:15:9a:0f:08:4a:b1:3f:56:
34:d3:4b:69:ac:5c:d9:0c:10:8e:0a:ce:1f:79:0b:
d4:80:df:fb:70:25:58:cf:d0:53:d2:46:12:f3:af:
22:35:7a:62:a6:4b:2d:7b:6c:22:31:b3:2b:b8:8b:
27:a0:3d:c8:ba:1e:8e:79:78:f3:c1:a1:0b:08:82:
91:cd:35:a7:d2:70:6f:2f:35:02:d3:c9:63:e7:00:
30:fb:05:71:8c:e6:9f:42:1e:0f:b6:60:b8:bd:ab:
bc:29:5b:45:d2:60:a5:a1:df:fe:f8:f2:bc:1b:ce:
61:bc:c5:42:6a:08:31:41:fe:f2:b6:8e:cc:eb:d0:
14:ba:14:62:d0:9a:aa:29:93:fb:ad:d2:59:02:71:
f9:78:c8:53:3b:53:53:7d:a4:48:d9:a5:d7:61:c3:
03:43:37:07:60:0c:ca:2d:1e:63:a2:7c:a3:18:6d:
46:ee:84:a3:e5:21:42:01:80:1d:c2:f2:09:21:53:
84:e3:1a:d7:a0:7e:55:0c:0a:0d:a9:96:29:9b:45:
f4:7a:3d:33:13:8f:fd:12:e7:a3:2c:51:5e:42:ad:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.28.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201278
Signature Algorithm: sha256WithRSAEncryption
90:15:38:cb:31:31:65:61:86:50:ad:d9:c0:62:09:48:8f:0a:
2b:4f:99:91:b6:e4:7b:2a:af:01:b2:ef:34:41:73:02:b9:31:
85:ff:83:77:3b:1e:70:12:8e:63:d0:b7:5b:c4:ed:7e:26:19:
cc:c7:e6:42:f0:a4:d1:d2:01:4a:83:6a:bd:ea:f2:81:3f:48:
8c:ad:36:1d:c4:63:24:a4:a7:55:bc:d6:14:1f:41:f5:48:cd:
d4:93:b4:65:0b:b6:45:1f:12:09:11:e2:60:e8:04:0b:3f:c4:
24:39:04:9c:5d:bf:94:59:7b:4b:67:a3:4b:9d:17:3f:51:c8:
6f:af:73:76:22:12:f5:15:a8:04:47:b9:39:76:4c:93:48:04:
50:89:de:ee:dd:40:4a:1c:2b:5a:39:77:a3:54:7c:3a:61:29:
41:85:97:42:10:0b:cb:75:38:71:3c:18:79:06:a8:40:6e:32:
2d:d3:ed:c7:5b:4d:46:2c:9a:7d:ab:c7:4a:09:09:3c:91:ae:
e8:22:4c:67:67:5f:1b:d8:71:ee:66:89:da:75:9d:5b:6c:be:
fc:f0:bf:ad:54:e2:1a:70:09:4c:3c:4a:47:e9:de:d6:73:28:
02:d0:a2:b7:c0:30:72:ce:25:70:5b:b4:70:f6:a0:39:98:a0:
b5:24:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:50:28 2024 by rpki-client on console-ams.rpki-client.org