Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.cer (raw, json)
Hash identifier: A/c3MZj5AKMc5fXLpaf+XOzXSmf6kn+8WyMSBBuxDVQ=
Subject key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE68A75A8CFB192D6EBD742F41A6BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49818
AS: 208154
IP: 81.22.228.0/22
IP: 185.75.192.0/22
IP: 2a03:4ca0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:68:a7:5a:8c:fb:19:2d:6e:bd:74:2f:41:a6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:bf:cb:34:88:c0:59:d1:51:de:71:76:dd:
06:ca:2e:ea:46:0e:71:26:21:28:16:f5:33:a9:3e:
3f:b0:a4:89:26:e0:92:f0:a7:1a:26:bb:4e:8a:1e:
2d:69:6a:2c:88:f8:de:fe:8c:34:57:12:8d:4a:df:
94:cc:14:4f:8c:a0:cd:5b:0a:7b:88:34:09:41:41:
cb:bc:9f:79:1f:d9:b7:19:d9:2d:ff:25:07:eb:35:
bc:ce:f4:81:f2:27:2e:88:63:a4:0e:4b:f0:9b:b0:
c4:e5:a2:2f:af:c3:3d:41:40:8c:d1:8a:85:d3:7e:
d8:86:e2:03:f3:6a:ee:9d:9a:7d:a3:dc:dc:8c:cb:
a4:08:b4:e7:66:bc:57:23:67:a5:cd:1a:d7:35:65:
c2:65:a5:9f:09:4b:37:78:e7:fe:1d:c1:ec:26:8a:
63:7c:d4:36:08:26:08:86:bf:02:a5:1d:bc:e5:90:
db:95:ec:89:8b:6f:3b:a5:dd:4b:e0:af:1c:45:39:
57:11:82:73:39:83:1a:1c:33:16:f0:71:53:d8:3b:
08:6a:17:d5:91:e1:85:50:56:b2:84:02:0d:a4:fb:
e7:f5:8e:7a:8c:a9:b8:94:be:99:ad:60:0c:bb:cb:
05:a0:7e:c2:56:61:04:67:d1:09:c1:ba:d9:6d:d7:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.228.0/22
185.75.192.0/22
IPv6:
2a03:4ca0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49818
208154
Signature Algorithm: sha256WithRSAEncryption
76:df:ff:59:0d:60:4f:37:ad:3a:12:9a:1a:04:48:d6:d6:92:
fa:c1:86:08:1c:76:f4:77:1b:e8:b4:cc:5c:71:d5:d7:78:fc:
d7:08:a5:62:c6:60:d3:7b:36:e8:ee:f5:05:b4:cd:19:62:4a:
b6:fe:40:55:77:3c:fd:b6:f6:11:17:7e:32:09:61:7f:5c:79:
23:84:c3:38:44:2b:68:45:af:f3:67:6c:7d:62:84:7e:ab:dd:
80:71:f3:46:ab:04:da:d6:45:09:eb:34:5e:a8:05:a6:83:f3:
80:01:3e:e7:7e:d4:f4:2d:66:7f:a4:bd:5f:47:5f:9c:3d:50:
a6:55:4a:cb:30:04:72:a2:f0:e0:80:4c:e9:1c:97:fd:29:ee:
d2:df:02:cb:7f:48:4b:9c:8e:36:50:cf:71:c8:cd:c3:7e:3f:
0f:93:22:74:e5:27:f3:46:f3:9f:f5:82:73:06:96:2d:7a:23:
22:7c:23:0a:3d:ca:39:98:b7:2e:dc:39:ca:60:5e:16:61:85:
cf:5f:f9:38:91:11:d1:50:d0:e8:21:8e:ae:90:1d:01:72:3d:
1c:b9:b7:83:6e:96:0e:24:44:0f:4a:30:3c:58:89:2c:5f:34:
72:a8:cc:2e:de:39:75:f1:39:36:8c:73:88:b3:6e:bc:47:8b:
2b:e7:02:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:20:15 2024 by rpki-client on console-fra.rpki-client.org