Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
File: KsPteUra-5HLgalp64qbKQX-4uw.cer (raw, json)
Hash identifier: 88439yHa9wPq94nVSrziOuhBIC1Ohq1z295OplhrcHk=
Subject key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B143FE77F85170576D59A8D6FBDD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51938
IP: 46.19.192.0/21
IP: 185.192.160.0/22
IP: 2a0a:2d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:14:3f:e7:7f:85:17:05:76:d5:9a:8d:6f:bd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:11:a6:1b:3f:50:4a:66:e8:50:75:b1:d2:
d0:c7:de:7c:90:8a:b8:ba:91:a6:b8:9d:d3:be:4c:
da:86:64:4a:e8:4b:80:0b:b8:28:0e:fc:76:b9:61:
28:f6:31:40:3d:5f:61:7c:8b:72:1d:68:5e:5c:cc:
1d:3f:42:b8:53:51:68:5b:63:f1:bb:ff:ed:73:11:
ad:98:27:34:4a:52:5b:2d:5b:fa:f0:e6:7e:49:5e:
10:c5:03:75:51:c3:5b:c5:b3:6d:c4:99:a3:48:18:
7a:be:9e:da:8f:39:c9:3e:aa:48:46:47:26:f2:59:
c8:8a:80:5b:f0:45:ed:07:99:f3:cd:de:dc:29:56:
49:62:4d:e4:50:6b:b2:83:1b:4f:29:71:71:d0:5d:
3e:b1:31:27:bb:1e:47:08:c3:93:17:db:b4:c5:45:
02:d1:99:16:68:88:27:2b:af:74:93:1b:50:e8:a4:
3e:a4:74:03:7d:48:37:db:47:51:66:a1:8c:32:a1:
d4:54:ae:d3:c8:43:dd:56:44:b5:d9:ad:77:bb:67:
a5:54:2f:8e:b4:b4:65:53:f4:29:23:d9:c0:5a:fa:
63:c1:14:e3:2f:cf:80:7a:d9:56:f5:d6:28:9d:d4:
7f:82:21:c1:68:32:e7:85:e3:8f:ab:3c:95:33:77:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.192.0/21
185.192.160.0/22
IPv6:
2a0a:2d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51938
Signature Algorithm: sha256WithRSAEncryption
75:1f:10:f6:57:43:98:b0:42:83:a3:c5:3d:1c:f0:c3:c5:9e:
2b:19:4b:20:2c:92:47:de:9c:e0:bd:56:b1:df:a9:4e:5f:f2:
a0:b5:f2:20:32:17:6f:3e:70:15:79:05:ed:da:f4:c0:b0:31:
83:86:82:9c:0f:2d:af:99:81:3f:29:fe:b1:c6:41:24:8a:2a:
23:89:a7:bc:8a:d2:94:ea:ec:e9:8e:2b:a1:1b:d3:84:84:f5:
a1:a4:d7:83:be:e4:54:b8:09:f0:a5:8d:2a:94:d1:58:99:78:
02:65:d9:fa:80:7f:1d:99:69:4f:a6:da:78:73:56:1c:14:ad:
f6:d7:c7:26:71:a3:d1:6e:e2:93:9c:f4:a8:95:3a:fd:63:99:
17:f2:2a:10:83:af:5b:fa:12:c8:f4:75:5a:d5:67:e7:ab:4d:
c4:9c:41:6e:05:0d:ea:48:fb:7e:b1:61:d5:6d:09:9d:e2:d8:
7f:39:ec:7f:b9:45:22:61:98:ee:95:36:0a:74:c3:75:c1:f9:
e1:b3:0b:1b:6f:0e:55:68:cd:33:7f:67:87:d9:69:79:e1:33:
1e:4d:9c:75:a4:d1:11:26:da:df:c8:cc:72:5f:36:1b:0b:08:
64:57:be:2e:2e:ff:cb:eb:c1:b6:0b:b4:e4:ca:c5:16:c4:f0:
13:48:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:56:18 2024 by rpki-client on console-ams.rpki-client.org