Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.cer (raw, json)
Hash identifier: jVs+8fR3t1t8tNAFPVn5K3kQTvSo2Bx6euQwS6vYfj4=
Subject key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4246D68D23B52209105F65A1AF4D451
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57333
IP: 176.97.160.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6d:68:d2:3b:52:20:91:05:f6:5a:1a:f4:d4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:a5:6f:2e:50:ee:a1:bd:6f:72:49:38:b4:
ea:80:47:10:e6:0a:20:0f:65:f1:19:27:7a:6e:9d:
2c:87:e6:77:d4:05:79:cf:dd:0f:14:64:65:03:3b:
09:b0:05:c5:17:14:07:ce:e7:45:c7:3b:40:4a:52:
db:67:76:28:06:f1:a8:8c:b8:9b:69:d2:b5:00:18:
5c:5b:8a:3b:d3:f0:20:86:71:3c:4b:63:11:3e:ad:
fa:9e:28:a7:00:25:23:c1:3b:2a:9c:dd:a7:df:3e:
06:92:a7:aa:3d:29:e0:46:fc:7f:4a:c7:84:f7:0f:
46:10:4c:3b:ec:8a:5f:f4:15:5c:92:48:5b:18:3f:
2e:2d:3d:71:f4:66:11:57:e7:24:11:20:ac:7c:bc:
d7:40:a3:9f:91:d5:51:97:4b:c6:08:fd:75:9c:ff:
51:85:aa:6b:ec:25:a9:f9:ee:d2:76:10:e4:9c:5e:
13:a3:19:ea:d4:e9:59:16:e7:80:7e:76:96:bb:7c:
d8:63:c4:aa:b9:17:5a:cb:10:ab:68:ea:89:c6:c1:
3f:ea:e1:bf:fa:f9:9f:da:2a:cd:51:0b:f3:ad:0d:
66:44:df:58:9a:aa:2d:3b:5c:5d:72:56:ee:8c:1b:
d4:2f:c5:a3:40:00:dc:22:d0:cf:c6:ca:96:37:c7:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.160.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57333
Signature Algorithm: sha256WithRSAEncryption
55:a7:3c:ad:c7:47:85:6f:fe:d6:c5:11:a7:ba:71:9f:8f:35:
5d:ac:dd:84:2a:1d:7a:58:b7:29:80:1a:a0:04:07:dd:5b:87:
32:cf:3e:bd:fc:3e:1d:09:48:f6:3c:44:42:d5:17:05:2d:c6:
7b:af:97:d1:09:8c:34:dd:c5:2d:76:9a:7c:5a:41:7f:14:3b:
be:c6:25:3f:97:41:a1:74:d4:fa:20:9d:83:60:ba:d0:07:95:
80:11:ba:25:36:0f:e0:45:16:e5:9b:bb:b4:8c:90:f1:10:30:
7e:a9:68:52:50:5b:ac:67:88:48:0a:61:04:48:da:da:6c:2e:
62:bf:ed:40:25:27:59:c4:38:33:f2:46:66:d2:3d:54:c2:db:
33:eb:82:64:73:bc:7a:0f:2f:07:16:ea:09:66:55:b8:18:55:
6f:d5:a2:53:9e:bb:64:bf:d4:66:ce:19:cd:eb:e8:3a:dc:b7:
26:e6:8b:74:7d:64:53:c7:25:6d:97:a5:32:f0:8c:9f:42:25:
78:8e:b0:7b:5e:ca:8a:1d:79:e6:55:32:6f:97:26:d3:5e:c9:
3d:8b:73:72:b6:01:13:fd:a1:ab:2c:9e:a8:4f:b3:ca:a2:0f:
42:22:d2:37:08:d9:a1:43:b7:ca:53:c5:71:65:7c:6a:76:c1:
5c:42:96:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:02:48 2024 by rpki-client on console-ams.rpki-client.org