Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer (raw, json)
Hash identifier: JupPIYHkgj71dKB17IFtwteQmw8RsYvGcWoMoLVyAEs=
Subject key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192CA81430D11DC6422813B7C80E61FF0E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 26 Oct 2024 20:25:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202220
IP: 195.149.98.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ca:81:43:0d:11:dc:64:22:81:3b:7c:80:e6:1f:f0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 26 20:25:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:d4:00:8f:dd:5e:0e:e5:9c:6d:ea:b3:75:
05:8d:24:12:c9:99:f4:aa:b2:e9:06:21:87:cc:84:
1f:d0:bb:72:f2:48:96:dd:75:17:82:81:5d:46:1d:
ff:bd:94:15:63:67:30:77:1c:27:e7:45:92:a6:3a:
90:f8:b7:35:25:0c:df:9f:8f:4f:78:ff:fd:3a:f2:
10:49:20:55:da:2f:47:3e:ab:c7:12:98:56:9d:44:
0e:c8:9e:89:31:02:98:c1:ab:28:28:73:31:f3:e9:
4e:f4:3b:de:c0:f7:13:46:8a:49:6e:16:64:27:af:
c9:c4:7a:ce:36:a2:5b:28:ba:f8:0f:d7:b5:da:cb:
5b:ef:3d:d0:e7:b4:f2:11:9f:8b:f8:f7:ef:1c:90:
4b:91:71:85:1e:69:eb:0e:d9:3b:53:0c:f2:45:55:
4a:c0:3f:e5:12:5f:86:80:0d:03:3a:49:37:33:34:
0b:5d:37:ac:d2:a7:26:93:e2:45:cb:75:57:d9:9e:
18:af:3e:48:6d:a1:aa:5c:f4:6f:ce:76:09:3b:d2:
ce:00:7e:dc:46:96:1e:cb:ac:a9:79:ef:6c:f3:fa:
cf:80:30:93:1e:d8:0d:e6:51:f7:02:27:23:bd:e0:
9c:01:35:3c:28:70:b2:26:d4:e6:cb:55:38:5f:f9:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.98.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202220
Signature Algorithm: sha256WithRSAEncryption
1a:6d:b7:3e:38:f0:2a:f4:0e:06:31:98:4e:f4:4f:e8:4f:d1:
4e:81:31:25:f3:5b:30:ab:f2:03:fa:d1:d0:a0:e3:32:b5:2a:
dd:20:f1:3d:05:58:c4:b6:ea:e1:14:9b:8c:cd:79:1a:1f:16:
d6:a9:f1:58:57:1c:ec:96:9e:db:7a:82:16:c6:c0:7d:0c:16:
f8:c8:f5:ae:66:eb:f1:1c:0c:e3:d9:5d:01:35:41:73:1f:a2:
4a:bf:87:d3:68:e6:23:5f:95:4d:b2:ca:09:e9:ea:2c:02:85:
57:de:a1:31:b9:34:54:32:6d:88:0e:86:c6:e4:c2:0f:e7:8a:
8c:73:fc:ea:f3:3e:78:6a:b6:01:b9:9d:fc:27:84:09:2e:3b:
dd:ea:f8:71:36:d6:2b:00:0f:29:7e:df:9d:cb:53:0d:99:57:
c7:cf:e7:d8:da:68:31:ea:15:7e:4e:65:7a:ea:8a:d3:8e:c1:
8f:77:40:59:f2:38:83:59:51:e6:84:c3:52:df:52:7d:f1:b7:
12:2a:c0:b3:3f:7d:08:cb:32:4a:c1:f9:b8:2d:f2:55:58:83:
a3:d1:88:b8:c6:36:7d:f3:66:49:1d:f7:82:57:27:69:0f:84:
b9:43:3b:f7:ed:e5:a9:c5:3f:d7:05:8c:56:ec:8a:73:bb:62:
cf:f2:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:12:48 2024 by rpki-client on console-ams.rpki-client.org