Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PLeOcZG8djnih_UWpvQBnhpBjdc.cer
File: PLeOcZG8djnih_UWpvQBnhpBjdc.cer (raw, json)
Hash identifier: djrAVVF9op1By1TpdmU41FpWf3Awvme1oiFlDbKdiNg=
Subject key identifier: 3C:B7:8E:71:91:BC:76:39:E2:87:F5:16:A6:F4:01:9E:1A:41:8D:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCAE1E40488E3686FFC267C4FE728F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/PLeOcZG8djnih_UWpvQBnhpBjdc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41106
IP: 89.200.176.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ae:1e:40:48:8e:36:86:ff:c2:67:c4:fe:72:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cb78e7191bc7639e287f516a6f4019e1a418dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:57:6d:7a:bb:8e:43:02:9a:c0:7d:f3:73:
42:4a:e1:17:32:6d:e3:0b:12:b4:6b:5c:94:bf:d3:
be:93:e7:06:42:13:78:2c:a0:fb:e2:9d:37:0c:b7:
e3:ef:25:35:a9:62:46:e7:f5:a0:21:e9:e5:65:d4:
62:e2:9c:c0:e3:ef:3f:3f:1f:ad:01:96:02:1d:bd:
70:10:1b:f6:ed:74:de:0b:ee:8f:1e:ac:b5:bf:76:
08:9d:ef:2f:96:dd:45:0f:6c:fe:fe:39:6e:60:37:
67:d8:fd:4e:39:ad:b8:48:52:54:4f:19:fa:03:d0:
e2:86:71:ec:a6:c7:03:7d:57:b1:6e:28:65:f4:80:
35:4a:e1:d0:5e:ad:5f:17:a7:3c:6e:1e:86:db:d4:
f8:c5:88:a6:90:4b:14:70:13:8c:75:dc:e2:b9:f7:
20:0e:66:65:cd:d1:2b:11:87:62:74:be:3f:ac:f4:
58:fe:11:ac:23:4d:84:74:a8:65:01:17:64:a9:13:
f6:58:7b:f6:8e:ab:94:be:7b:64:e9:24:b3:1b:c7:
b7:23:9a:bb:83:53:12:35:52:5e:96:75:02:ea:e1:
27:29:8f:fa:94:d0:4d:b4:04:a1:f2:30:08:26:a7:
a0:21:f1:44:39:83:38:4e:5a:63:06:b8:bf:93:d7:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:8E:71:91:BC:76:39:E2:87:F5:16:A6:F4:01:9E:1A:41:8D:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/PLeOcZG8djnih_UWpvQBnhpBjdc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.200.176.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41106
Signature Algorithm: sha256WithRSAEncryption
20:74:df:b3:7d:72:b8:5e:c6:8b:32:7d:d9:4e:18:26:6b:68:
8e:9b:f6:85:a6:27:8b:59:8f:9b:22:08:63:be:33:13:e3:c9:
ee:9c:04:d9:19:58:86:9b:22:47:47:37:31:8e:45:bb:15:ac:
8f:42:82:2e:33:e5:25:43:60:66:31:11:74:f8:3f:1f:1d:f4:
1d:bf:b5:7b:f0:c4:b1:24:f7:83:75:df:21:35:87:e6:4b:4d:
9e:e8:a0:b2:a0:86:cd:a5:24:f3:03:9a:3c:a1:84:44:15:0c:
aa:1b:1d:fd:15:aa:90:a0:f9:0f:59:70:fd:8e:a3:99:7d:b0:
a7:20:25:fb:13:e8:a1:82:2a:f8:29:61:e0:1b:bf:a4:02:d1:
d2:b5:2c:56:6b:e5:bb:8f:d4:88:fa:7c:ae:83:7b:73:70:55:
80:34:f9:cf:3a:c1:f0:4f:64:f4:78:4b:1a:6a:2a:b4:c3:01:
68:10:04:98:ed:76:23:a9:eb:cb:c2:43:45:0f:59:37:3e:75:
93:b6:7f:58:2c:4f:39:f2:ed:b3:36:63:c2:09:65:d1:74:94:
31:2c:8e:70:37:5d:02:6e:57:11:c9:0d:5c:33:5a:56:67:5e:
55:3e:26:24:a2:e4:e3:49:eb:b9:7f:b7:18:81:db:de:9c:84:
ff:a4:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:57:01 2024 by rpki-client on console-fra.rpki-client.org