Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
File: IeQhptlumdY_fPtJnKcRfIIwTqo.cer (raw, json)
Hash identifier: PN6J0bt1YSpstc8lHpCMzT1IEMvmcXKIk+nq034hyHQ=
Subject key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B725268591B9AFB07EE69B536D5FF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210178
IP: 194.61.140.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:25:26:85:91:b9:af:b0:7e:e6:9b:53:6d:5f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:53:96:99:be:89:3e:ad:69:20:1f:41:88:
b0:b3:53:02:1e:ab:eb:67:9f:71:e0:9c:19:8a:bc:
e6:90:5c:3c:ef:ab:10:15:96:99:3b:07:63:7b:69:
e5:49:35:8e:8f:11:ae:91:c7:bf:a9:92:ff:4d:49:
ea:ec:bd:61:14:0e:80:60:c3:97:46:4f:7d:f6:3c:
a3:78:8b:02:e7:94:48:99:4f:85:a2:19:44:06:85:
ba:f7:e0:6e:e3:9b:45:77:5a:b4:ca:76:54:e8:f5:
e2:60:8a:3f:16:74:10:82:02:75:d2:b0:05:0f:e4:
cf:ca:ae:77:95:b9:8c:27:74:87:a9:1b:ea:a3:83:
38:e8:99:54:58:04:d4:41:d3:77:f3:0e:6f:08:d6:
30:7b:ab:43:1e:75:17:9e:a3:38:34:62:5a:93:2f:
d7:96:28:a9:32:11:d0:e2:30:38:4b:da:83:1a:67:
04:cc:3d:c1:60:84:35:33:f9:bf:5d:e6:26:90:88:
a9:1f:86:ef:e0:41:ba:fc:52:a5:63:a5:b9:af:be:
00:7c:0b:b2:dd:1d:e8:1b:2c:67:bd:f3:25:eb:a4:
5f:cb:50:a4:54:86:3e:89:75:fb:59:5b:be:59:1b:
d7:cf:15:67:1a:90:50:bf:d9:4e:95:fa:b5:fb:53:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210178
Signature Algorithm: sha256WithRSAEncryption
8a:9e:1a:ff:5f:cd:da:60:bb:80:a6:77:1a:d4:a1:da:5b:3c:
14:37:1c:26:df:41:2d:a6:b3:10:4c:37:21:c8:d6:e6:c4:bc:
06:0c:15:dc:9f:ba:ab:b9:ba:aa:4c:d9:f4:3e:8e:d8:11:f1:
8a:77:8a:b8:49:22:1d:96:3d:dc:ef:be:88:03:26:79:0d:ed:
68:b4:a0:d1:7d:df:04:13:68:f4:ca:cd:40:42:70:3a:e7:e8:
31:39:d0:5f:5e:9f:f3:c4:08:18:01:95:88:e2:6a:e7:7d:ca:
50:fc:00:04:8c:f1:09:23:98:54:5a:2f:7a:73:8e:b1:d9:1b:
68:ae:87:fe:d6:3f:64:72:c3:fe:2e:ee:fb:21:90:52:f3:b9:
8a:8b:03:ea:81:6a:47:54:4a:fa:21:8d:f0:23:4c:07:fe:1f:
78:8a:d3:58:cd:2a:fa:da:33:c8:fc:4d:17:d5:5a:67:13:00:
b4:a3:4f:1d:61:a3:7b:df:74:72:07:5a:0a:ef:91:bb:68:c6:
5c:4b:c5:6e:55:1f:48:5a:3d:21:8e:75:56:5e:c6:88:6d:91:
14:09:eb:71:fd:dc:e9:df:e8:37:23:ec:d6:9f:c6:ba:b7:38:
72:5a:fc:2a:a2:e6:dd:03:da:17:ac:22:c2:b3:7a:9b:59:18:
33:8f:a9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:56:46 2024 by rpki-client on console-ams.rpki-client.org