Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer (raw, json)
Hash identifier: 5xiehsMp/Djx+8zSLXdSQLgsOEcZYDzHDS2Kk/OLZdI=
Subject key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019206125E58C0A9706434FA6E690D93319D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Sep 2024 16:58:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44482
IP: 91.199.138.0/24
IP: 91.225.92.0/22
IP: 194.28.52.0/22
IP: 195.238.116.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:12:5e:58:c0:a9:70:64:34:fa:6e:69:0d:93:31:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 16:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:60:e2:e5:ab:57:43:56:6b:45:1a:84:7b:
5c:09:bd:8b:eb:a1:71:19:01:d9:a4:5d:d3:b6:54:
e9:7b:18:4b:7f:7f:55:34:68:d8:7a:5c:9e:23:fd:
ac:eb:12:f4:7a:81:30:b4:3f:1e:ea:17:47:b0:b4:
12:c8:09:62:a1:cc:59:c5:49:1e:39:3d:be:84:86:
e0:69:df:da:aa:01:d5:8e:d6:5a:4a:a4:64:7e:ba:
3c:15:b6:0f:c7:fa:3e:e9:f5:f3:3f:5c:4a:51:f2:
c9:12:50:f0:40:7b:6f:76:06:26:b1:18:fb:5e:f2:
80:d9:b7:f1:97:cc:6f:15:8c:c3:cf:cd:4d:9e:b2:
ce:b6:48:ab:c7:bd:58:4c:05:86:3d:76:3f:bd:76:
e4:04:06:3a:d1:42:8f:ac:fb:da:2b:ae:85:c6:d2:
24:ea:91:87:e4:e9:fb:d3:51:78:b0:7d:13:34:6f:
4f:f4:16:99:0a:0c:49:9c:e7:67:01:b0:46:61:36:
07:5f:51:8d:cd:20:a0:1c:a6:30:bf:31:92:a7:cd:
1f:a3:0e:09:0b:3d:10:49:61:82:f1:e8:e3:81:bb:
1d:30:83:e6:35:c5:61:e5:e4:97:64:d0:94:e6:d4:
5c:fb:24:11:70:c0:dc:57:71:5d:fc:bb:2c:28:df:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.138.0/24
91.225.92.0/22
194.28.52.0/22
195.238.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44482
Signature Algorithm: sha256WithRSAEncryption
96:b9:ac:3d:e5:84:79:e9:9b:39:1f:db:b2:3d:49:64:44:ff:
6d:a1:a5:a7:6c:c7:c9:82:69:93:97:c8:4d:72:3a:ab:61:99:
c3:59:36:a6:9f:34:89:c8:0c:6a:3d:24:18:ab:ca:d4:d4:4f:
01:76:60:ab:8b:1e:6b:5c:ed:81:ac:a9:24:be:c1:85:3b:79:
ef:bb:c1:db:54:c8:f1:60:df:83:52:3e:7c:30:d0:26:be:84:
27:a7:d5:5e:c4:ce:61:44:f2:d9:7b:d8:19:95:6f:75:67:a0:
41:01:14:de:63:22:bd:97:d2:3f:a9:6a:cc:ae:f4:ce:70:39:
ca:9d:74:69:6b:d6:be:3c:b2:6c:d0:fe:3a:b8:75:fd:57:5d:
4c:8c:0d:0d:02:8f:48:16:82:a1:04:a3:ca:e8:46:ab:ab:ad:
3b:9d:35:ee:97:ad:ef:bc:6e:76:18:6e:2e:b3:6e:75:e7:8a:
7f:f1:a0:c7:6a:74:75:ab:3d:ad:91:d9:44:c2:66:e0:f3:8e:
5e:6b:a4:84:d9:92:d4:58:00:2d:d1:9a:cc:f5:e3:5e:70:68:
87:46:76:9f:73:31:63:a3:3b:1c:e1:74:8d:98:a1:31:ac:02:
12:b6:c6:e1:2a:42:85:9c:f9:70:0c:72:f3:da:98:ad:54:79:
ad:ec:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:02:34 2024 by rpki-client on console-fra.rpki-client.org