Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.cer (raw, json)
Hash identifier: xe2EsxSn2/lrI90tPlMpbJ6BJNW0Icunqq5Pq4x6hZc=
Subject key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801904EE3241AF7AFC6CD32943C236B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43858
IP: 91.198.199.0/24
IP: 146.255.168.0/21
IP: 185.11.160.0/22
IP: 185.80.176.0/22
IP: 2a03:39c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:90:4e:e3:24:1a:f7:af:c6:cd:32:94:3c:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:4d:af:1e:b7:84:6a:03:e1:aa:41:99:b8:
b8:a1:d6:91:92:85:99:c5:75:f9:48:bb:62:54:7e:
00:55:78:80:d2:4c:e6:77:9d:4e:dc:3e:85:ac:92:
0f:5f:8c:0f:e7:23:62:e4:9c:03:69:d2:25:da:7d:
b6:50:67:c9:a8:39:7d:38:17:34:75:ef:f1:88:02:
86:a5:57:4e:6f:a3:37:32:03:4c:7d:dc:78:6a:08:
ae:03:a9:c5:5d:0a:b9:77:d7:0f:3e:ce:de:9a:61:
97:86:34:53:e2:72:85:a6:90:b3:2d:23:c6:fb:45:
7b:34:16:c8:cf:48:8d:82:9f:9f:08:0d:6a:cc:de:
d7:35:92:7d:46:82:df:8d:97:f4:73:25:08:8e:3b:
3e:06:4d:36:2f:d6:de:6c:88:0c:92:eb:81:4b:ea:
7c:15:b7:a8:73:4f:89:13:76:14:0a:b3:23:b4:73:
02:c7:15:16:b6:60:1e:39:b2:18:5c:69:a4:d6:37:
2e:af:8d:9c:47:27:fd:30:01:a0:3a:5c:d8:43:cd:
7f:05:5a:a9:27:54:ec:2b:1f:1a:b4:e4:6a:39:cd:
35:b9:b1:c5:1d:31:db:b4:12:6b:9a:35:92:13:94:
26:b8:b6:4f:75:e7:51:35:a1:2a:cb:56:6d:40:5a:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.199.0/24
146.255.168.0/21
185.11.160.0/22
185.80.176.0/22
IPv6:
2a03:39c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43858
Signature Algorithm: sha256WithRSAEncryption
a6:56:25:e2:e4:40:10:1e:8d:ec:36:70:df:cb:4d:cb:97:c1:
64:31:0e:a1:65:5e:cf:90:52:5f:79:1c:cd:e8:1b:2d:b8:36:
d3:a3:3c:a5:d4:40:7c:31:7e:77:18:87:57:79:0d:a0:f4:c3:
dd:c0:48:97:7a:20:2f:e4:08:8c:ef:95:e7:d9:54:0b:44:96:
26:8b:95:c5:7b:cf:a7:ed:14:9e:7d:1a:5d:3c:d8:f1:f0:d1:
eb:11:7f:82:04:7c:f9:08:73:bc:db:c2:9f:33:80:1b:ed:6a:
00:ae:9a:8e:b4:9e:09:f2:37:12:0d:4b:3c:97:ed:8e:49:1e:
ac:d2:fb:9a:a4:d1:db:24:7b:b8:b4:ed:19:e4:cb:e5:78:e4:
98:7c:7d:4d:7a:ca:fb:c0:1c:4a:8d:11:41:d5:a4:41:ad:c6:
ee:c0:01:83:b4:68:4b:25:c1:a8:ad:df:67:b7:9d:34:42:e9:
b7:9c:88:87:08:58:7b:e5:a9:05:93:af:c8:2a:41:42:05:6a:
4e:f4:95:bd:ac:4c:47:89:ce:9b:9d:90:d7:e8:df:7a:a8:49:
fa:ef:80:16:37:1c:c9:f7:6f:5d:a2:fd:dc:c1:af:7d:33:9e:
ef:c5:66:8b:e0:10:82:29:81:81:27:ad:92:2f:30:05:3a:2e:
d9:e6:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:53:56 2024 by rpki-client on console-ams.rpki-client.org