Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
File: LOcbH07qAVkkYSX8WumtUaRHks4.cer (raw, json)
Hash identifier: G1J7SCQzOrkkmwHC0tLU+5kFe1/khrI96GETTeGhhgA=
Subject key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAD4E352187B92DE13DFDD47C2D366
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197735
IP: 91.226.26.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d4:e3:52:18:7b:92:de:13:df:dd:47:c2:d3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:bc:9b:3c:c4:c4:2d:09:ba:b3:c3:27:c4:
7f:ef:6b:c6:b2:93:51:73:a6:56:f6:db:ed:7a:d1:
80:34:49:27:7e:4d:6f:a0:5b:1c:8d:c3:3a:8a:37:
75:bb:cb:62:9f:6d:31:62:79:8f:ca:f9:84:ca:56:
b0:ce:6f:26:e9:2b:11:9f:b3:2f:73:0c:9a:de:1d:
b6:e8:5e:f5:57:4d:73:81:0b:2f:f1:1a:cf:8e:f2:
b5:57:47:d5:48:3f:a4:ea:c9:e8:66:9b:20:88:45:
42:3b:c6:89:32:b6:21:a7:3a:a2:0d:32:bc:fb:fe:
f6:c7:75:1c:d4:fc:53:ba:70:e4:c2:f9:eb:c8:86:
67:84:67:37:31:9d:c3:62:df:dd:eb:dd:d3:b0:a7:
96:99:6e:c5:08:3e:34:b2:62:a1:7b:63:4b:c3:86:
dd:cf:00:97:1c:64:58:29:8d:b6:d7:ee:dd:c1:e0:
cd:6b:8a:92:88:3d:10:3d:54:43:f4:5b:13:e0:7d:
25:12:5d:df:cd:9b:67:44:07:b1:e2:f2:0c:95:24:
b0:c1:91:b6:2b:94:8f:b2:f3:e1:56:70:3b:99:ca:
45:e2:bd:f8:37:c9:99:4e:fd:a2:0a:df:5c:de:90:
83:71:37:e7:9a:99:4a:a4:e1:cd:b0:da:3c:17:a6:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.26.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197735
Signature Algorithm: sha256WithRSAEncryption
38:77:41:4b:43:10:47:2c:92:17:79:d2:8e:e2:73:16:5e:83:
fb:8c:be:e7:92:f4:54:6a:3c:5f:a9:f0:a8:be:84:81:9b:27:
78:d6:4c:29:b9:ce:a5:81:7e:dc:ac:69:19:bb:07:02:5c:2d:
c7:6d:55:98:ea:a4:cd:93:7c:4a:90:00:db:e5:93:38:80:7e:
db:a6:43:4c:ff:23:e9:d7:ed:4b:72:da:fc:43:9c:21:95:d2:
82:24:a4:da:1e:93:54:ba:86:bc:79:e3:38:da:ea:3a:a1:59:
77:5b:0e:de:09:98:06:d5:f3:67:0f:f3:65:3a:bd:6f:47:1c:
aa:cf:a4:eb:4e:a2:54:4f:eb:6a:df:9d:ab:38:d5:82:ac:bc:
24:28:87:4f:25:44:54:88:72:b4:4a:07:6c:a9:c8:c6:45:19:
0e:35:1e:7f:13:11:27:b5:40:27:06:5f:2c:29:7c:f0:d5:8c:
b4:3a:9f:f4:f5:2a:f4:eb:db:ab:0c:d8:dd:92:0d:e1:da:d6:
6b:98:5f:64:1c:8b:04:25:85:d5:5e:35:f0:bb:96:ab:d6:19:
65:4d:4c:6d:2a:2e:47:5a:42:e5:76:a8:2a:44:c5:54:66:17:
76:dd:24:c6:80:f3:e2:94:36:40:11:30:c6:88:e8:a7:3c:d4:
1d:a2:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:12 2024 by rpki-client on console-fra.rpki-client.org