Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
File: R-ph18wsJ4p8S8-8ITezlKImVK0.cer (raw, json)
Hash identifier: kplH+T4rJiGyzCRpfA8xbtdHeu6FxKg9soPOgKDWo4M=
Subject key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F0B571123E4CBE1AFFBA4D99C02090B4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Apr 2024 14:23:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42640
IP: 195.248.228.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:57:11:23:e4:cb:e1:af:fb:a4:d9:9c:02:09:0b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 14:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:bc:99:ed:43:ef:42:24:4a:22:4b:20:d8:
38:a3:1f:64:4b:09:bb:34:49:d4:eb:33:c5:fa:f8:
41:3a:9a:9b:08:d3:70:1c:44:9b:fa:64:18:30:29:
0c:49:e8:a0:25:04:3a:40:9c:b2:27:e6:df:10:70:
25:11:f1:92:b8:be:77:c7:2a:e5:89:6b:d9:39:47:
e3:c0:32:85:6d:2a:1e:9f:4b:0e:b7:e4:94:e8:80:
ee:b2:8f:30:7a:c7:bf:57:a9:d6:4e:68:5a:36:f6:
d2:9f:68:de:85:d1:6e:42:a2:f9:d3:25:07:b8:5d:
7b:78:8a:ba:98:22:4d:26:0e:8d:4d:47:11:ea:2a:
37:af:a1:88:8e:04:10:e3:7e:79:c3:5c:09:74:ce:
ae:4c:b2:2d:28:f0:75:c4:2c:e6:ca:93:f8:78:e5:
19:05:60:4c:11:ee:bf:94:d3:b9:f9:3c:59:14:b6:
b2:50:14:2f:df:0b:cb:96:1f:22:53:06:e6:8b:31:
11:8a:37:71:cc:03:d7:2f:2f:fd:5e:4a:17:09:4f:
57:86:65:fa:cc:50:c8:3d:59:b6:9d:01:c0:44:40:
d9:a8:08:87:b1:a2:f7:83:7a:de:4e:7c:08:e8:21:
58:62:68:a8:e2:7a:09:dd:97:ef:41:07:b5:9b:be:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.228.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42640
Signature Algorithm: sha256WithRSAEncryption
9c:03:42:8e:b9:8c:85:9d:74:56:8e:dd:54:a5:c0:51:87:ca:
c9:95:53:d3:36:a0:61:d9:e2:56:ae:08:a6:34:41:9d:12:41:
fd:ff:c8:9b:f4:8f:a3:e4:f2:38:5f:bc:b5:7c:88:a5:0d:3f:
08:7b:f6:5a:bd:a7:10:d8:da:c9:47:9c:34:66:d1:eb:56:32:
7e:46:98:db:5d:0b:02:ae:86:1b:ce:8d:e9:43:4e:9a:4e:f7:
63:2a:1f:83:cd:40:f4:43:37:4d:fd:98:ad:34:b5:ac:4f:f8:
6e:b5:a7:c5:36:69:c1:6f:50:af:cb:3c:73:32:32:ce:46:2f:
fe:5b:2c:54:89:95:13:04:55:61:a6:7a:5a:69:78:38:1f:2a:
73:34:67:94:fd:5d:46:ac:70:a0:58:6d:81:af:98:a2:af:1e:
90:a7:f3:e9:dc:01:d1:11:69:40:6a:80:3c:8b:a8:64:37:48:
3e:8a:3d:57:aa:b1:36:f8:4f:ff:8e:f0:5f:be:b6:ac:cc:be:
ae:bd:ff:6a:05:75:0b:7c:27:04:d1:73:77:2b:8e:cd:a3:68:
62:2b:b1:95:d1:b6:2d:d3:9c:fc:fa:5c:96:a2:1d:35:a1:10:
6f:8b:13:bb:50:4c:93:8d:11:4b:97:51:fe:1f:69:9d:c8:b7:
27:f0:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:53:12 2024 by rpki-client on console-fra.rpki-client.org