Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hi7K7IpIZQRllMb38hCVIAFvDrc.cer
File: Hi7K7IpIZQRllMb38hCVIAFvDrc.cer (raw, json)
Hash identifier: +SK4BQntABERI09KmA7d1/L+g9OTKTX/vHLc4mvgN8Y=
Subject key identifier: 1E:2E:CA:EC:8A:48:65:04:65:94:C6:F7:F2:10:95:20:01:6F:0E:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E1300517357DE7DE8264DE9F10E67B9A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Mar 2024 09:02:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50980
IP: 185.133.196.0/22
IP: 2a14:13c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:00:51:73:57:de:7d:e8:26:4d:e9:f1:0e:67:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 09:02:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e2ecaec8a4865046594c6f7f2109520016f0eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:18:8c:3e:8e:a2:a9:46:2d:d2:c5:95:26:
42:e3:55:df:2d:f7:fb:b8:40:29:70:ab:9c:35:a4:
a2:86:98:e9:91:58:d0:be:61:73:68:2f:84:3c:74:
af:62:93:d9:a9:e7:be:54:31:44:53:dc:89:00:f3:
c3:a9:11:93:15:da:5d:0f:2f:23:60:f0:92:ec:ed:
4d:a4:af:24:fc:22:a9:67:fa:84:7a:a8:b0:6d:17:
b1:51:7e:1b:6b:4d:35:e6:55:da:85:af:88:85:9a:
e1:17:8f:22:0d:f3:86:08:b7:23:f5:f9:08:39:60:
af:31:11:b8:9b:e7:b1:c4:f9:2f:78:97:bc:1f:3c:
1a:eb:19:b5:b4:35:e9:b6:07:77:1d:e6:97:bf:65:
e3:4d:50:48:de:9b:4d:09:69:66:c9:06:dd:45:6c:
3e:f0:8f:74:b1:11:55:cf:d2:70:eb:53:ff:3b:e7:
38:d9:14:62:56:4a:92:f7:5a:ba:27:38:6a:fa:11:
73:f8:d3:82:17:2b:7f:92:9e:3f:8f:04:d8:17:ac:
d3:5b:2c:4a:21:08:2b:81:41:30:95:c7:23:37:a2:
7e:02:c6:8b:9b:13:cd:b2:53:36:82:00:7d:35:4e:
1b:b3:bd:ff:fa:ca:39:58:1f:87:9c:8e:56:6b:1e:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:CA:EC:8A:48:65:04:65:94:C6:F7:F2:10:95:20:01:6F:0E:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.196.0/22
IPv6:
2a14:13c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50980
Signature Algorithm: sha256WithRSAEncryption
4f:ed:aa:04:84:fc:cd:7a:79:f8:ac:af:2c:84:88:04:ba:e8:
4c:34:d7:36:35:d2:1e:b5:3a:10:57:37:34:e4:ba:e4:49:83:
16:6d:f6:0d:1a:79:ec:15:f9:de:00:9e:b8:c4:3a:fd:4a:f7:
94:d9:99:a8:1a:73:f5:04:a2:d4:c5:ca:d1:a3:e8:e8:0d:bf:
a4:a0:ed:1d:ce:a7:1e:69:24:bd:1f:b4:71:3c:53:f1:63:4d:
12:68:0f:44:48:47:c2:25:28:26:25:dd:46:b0:08:24:a7:ab:
0d:fd:3c:cb:b8:59:a8:5d:78:00:c1:01:cd:fc:79:29:26:02:
6b:53:60:77:02:49:e8:4b:f7:71:37:2b:10:b6:a8:13:07:13:
72:3b:2f:1c:b0:02:d5:b2:c4:ce:a8:6f:d0:f2:cb:e7:ba:d2:
82:c7:e0:f4:da:86:37:08:32:7e:82:9d:c2:43:e7:7b:ea:86:
6a:a6:f9:60:50:dc:5e:51:bb:f9:58:da:bd:f9:61:74:ee:9b:
d3:2d:12:bd:58:9e:92:f7:40:47:32:cd:e8:fa:c7:91:be:49:
50:14:1b:10:b3:42:48:91:b6:a0:7f:70:f3:7b:fe:46:9a:8b:
bc:d5:88:88:58:46:17:33:e2:24:35:46:2a:34:e9:22:30:45:
aa:a6:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:49:45 2024 by rpki-client on console-ams.rpki-client.org