Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.cer (raw, json)
Hash identifier: Ybz9stbgl5WiL6ag+RegaoeiDAr5KRKVNLdOepmzRiU=
Subject key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6D03F433EDBD6E1E347DA6E40E109
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41557
IP: 89.205.0.0/17
IP: 185.47.56.0/22
IP: 2a04:69c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d0:3f:43:3e:db:d6:e1:e3:47:da:6e:40:e1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:13:3a:51:b2:cb:20:01:91:ee:bd:be:08:
f7:e8:be:a7:05:55:ad:88:cc:d1:62:d6:31:6b:21:
ac:06:21:02:06:13:0b:da:b7:82:48:86:33:2a:16:
ab:ca:59:d3:58:9e:31:91:12:8d:f4:66:a0:ed:9d:
a5:46:22:0b:53:29:e7:0e:fd:00:b8:c3:b6:33:38:
6f:ca:cb:a9:73:ac:cf:9f:0a:4e:a0:99:5e:b7:b8:
cb:17:5b:91:68:d2:dd:ff:28:72:e2:b9:07:65:e0:
63:6d:9d:5a:7d:42:11:63:ea:8c:ab:1f:c3:d3:53:
2a:44:da:c4:cb:9c:39:f4:23:8b:81:bb:d9:cd:53:
43:3f:6d:25:c3:a2:65:b6:d0:1c:7e:ca:56:fa:0e:
00:48:96:a8:07:ed:28:c0:62:65:81:dc:ad:a9:44:
07:83:60:03:4e:3d:98:5b:28:36:a8:0c:6b:9f:ff:
f9:55:5f:03:34:44:a2:3b:41:94:b4:6c:b5:05:20:
d8:95:b3:48:98:f7:bf:b5:29:55:20:e0:79:55:f4:
4c:4f:c7:f6:15:96:e0:62:7d:9f:9f:77:ee:60:4f:
a0:74:69:6f:1a:e4:4c:e8:92:29:7a:b0:5e:e9:56:
91:a5:69:ea:8c:e7:0a:92:50:4b:af:fa:b4:d9:69:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.205.0.0/17
185.47.56.0/22
IPv6:
2a04:69c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41557
Signature Algorithm: sha256WithRSAEncryption
6b:62:b3:7d:e1:1c:1b:c4:cb:3c:97:48:d8:3e:0b:18:d5:29:
7a:5a:cd:62:c3:4f:98:ca:2b:ad:3b:b3:a5:d3:2e:1a:a1:88:
fa:b5:98:20:14:c9:78:a3:a9:3c:68:44:d5:eb:7b:22:47:b4:
3b:ae:91:6e:65:5f:92:89:77:cf:a3:c9:fe:0f:cd:a4:93:c4:
b5:eb:cf:ae:4a:d4:46:1c:21:0a:53:d4:40:61:51:12:1e:57:
4b:c5:a3:d1:d0:bc:de:ae:3c:b8:82:67:db:e9:3c:bd:2a:30:
69:57:00:86:57:9e:dc:66:d8:8c:cd:06:7b:eb:3f:c2:e9:ec:
7e:91:51:3d:bb:74:c6:c9:4d:39:fa:c2:af:b1:31:c1:7c:70:
a3:b6:b1:54:e7:ea:31:a2:9d:a8:f7:d9:e7:33:0e:82:c5:3b:
0e:f2:5c:a7:3d:29:bb:2b:d9:a0:0e:37:cc:ec:aa:45:76:42:
1b:98:70:be:7c:fc:ce:f3:82:6d:4e:bc:6a:66:8b:3a:29:73:
f9:66:96:de:c7:de:51:93:e9:4a:e3:e6:18:7c:2e:2e:58:c1:
5d:7d:99:46:9f:f7:2a:ca:51:55:45:5d:49:9d:c4:31:c7:af:
9e:2e:0e:e0:cb:24:1b:18:0f:28:e6:82:fb:77:d8:88:dc:d2:
2c:6a:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:51 2024 by rpki-client on console-fra.rpki-client.org