Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
File: DuKWtgwDjNxr_vTAYLFAYWTshow.cer (raw, json)
Hash identifier: buFolSdiqqW3e3kL0nlX6m/ujUKwliUYe3YP0IsfYJk=
Subject key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB612058E3731C437D66A35E183766
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202503
IP: 193.111.52.0/22
IP: 2a04:4ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:61:20:58:e3:73:1c:43:7d:66:a3:5e:18:37:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:62:fb:3a:6a:61:ee:3d:6e:3d:bc:fd:1e:
20:4b:4b:bc:27:5b:ef:97:bf:36:b3:a1:d0:3c:39:
c9:97:41:76:e4:01:5a:b4:08:bc:e0:41:fd:eb:59:
45:87:7f:3b:63:8f:36:eb:50:1d:09:4b:e0:fe:71:
a8:00:9a:cf:11:df:b5:f4:3d:fe:47:3e:27:9c:a4:
da:85:42:7a:1f:db:bf:33:4c:e4:a5:33:65:40:84:
6b:93:37:1f:5f:04:45:95:db:28:b1:1a:21:67:c9:
6c:d2:48:4f:e2:27:6d:3e:7b:87:fe:88:c9:af:eb:
38:da:9f:36:72:97:43:f4:f5:b7:d0:bd:e1:dc:b9:
23:34:fb:bb:9c:fe:10:6d:c3:12:16:be:fd:27:6a:
73:4f:19:44:68:6b:b1:df:66:40:60:f8:79:7c:66:
cd:ce:70:ae:60:dc:d4:d9:7f:0c:e3:7c:d4:93:7e:
3c:6c:77:59:c5:75:59:3b:57:02:38:5e:e7:9c:9e:
08:0f:fa:ec:a7:ec:8f:41:a7:d1:13:4f:cc:2f:d6:
ba:ab:a1:6d:26:fb:17:7e:fa:55:6d:41:51:b8:56:
13:32:95:0d:67:02:d3:bb:4f:81:34:d9:df:5a:83:
02:bd:af:b0:42:72:92:d4:bd:39:e5:34:4a:d2:0e:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.52.0/22
IPv6:
2a04:4ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202503
Signature Algorithm: sha256WithRSAEncryption
75:fe:b8:fa:f0:1d:ac:1c:45:be:02:d4:b2:11:2d:b0:58:e7:
bf:6a:e2:00:76:8b:c7:d0:49:1f:84:12:d6:89:18:d7:d3:64:
b2:f4:11:20:2e:23:cf:a4:6b:a8:1c:8b:3b:c0:13:71:4e:78:
d5:bb:12:64:d7:de:91:c5:70:0d:fe:48:b5:51:6a:08:e1:92:
6b:e5:e3:ea:8d:9d:fc:bb:e7:bc:66:50:2f:58:c3:6a:17:b7:
eb:c7:f6:d4:99:c8:d8:1e:ff:ed:5e:60:3a:28:54:1e:4a:64:
a1:54:6c:07:80:a4:b7:a5:83:a8:19:cb:7b:2b:19:df:66:cd:
f2:22:31:4e:07:1e:36:b9:3e:43:0a:ca:83:f2:0c:57:1e:3c:
4e:45:13:96:08:e0:32:93:eb:cf:d1:01:e0:e3:27:f2:0f:30:
d7:f2:92:d1:aa:a9:c3:b8:bb:60:d1:84:0b:5f:5f:9e:5c:64:
a7:ac:4b:c0:21:78:88:e2:3e:d8:ab:31:7b:84:0a:d0:c4:51:
53:50:e0:4e:b5:df:ce:24:74:4e:83:58:0f:05:35:6c:82:79:
c9:64:84:57:35:e0:d5:1f:8f:1e:e7:7e:c2:b7:f0:d0:e2:4d:
da:ec:ca:8d:b8:11:d6:f5:07:94:f4:3f:53:fd:3b:26:bc:38:
7a:d2:62:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:54:17 2024 by rpki-client on console-ams.rpki-client.org