Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8h8-T3Ge6p02s8kLN5seX-oQOs.cer
File: R8h8-T3Ge6p02s8kLN5seX-oQOs.cer (raw, json)
Hash identifier: IXTMRxttiuGLwKdHcSGb1IF0GHr0b9KYpMc2mpHp9h0=
Subject key identifier: 47:C8:7C:F9:3D:C6:7B:AA:74:DA:CF:24:2C:DE:6C:79:7F:A8:40:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349290BDDB1B48852D4E0176D83C45E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/R8h8-T3Ge6p02s8kLN5seX-oQOs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210215
IP: 146.19.2.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:29:0b:dd:b1:b4:88:52:d4:e0:17:6d:83:c4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47c87cf93dc67baa74dacf242cde6c797fa840eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:ba:ab:74:8f:25:85:83:c5:02:4d:f8:38:
cf:b6:52:d4:a2:3d:5b:68:e6:c4:c8:bd:e7:df:4d:
ee:23:c8:f5:0e:30:58:2c:6f:12:5b:ad:f1:ae:91:
d5:e5:df:97:a9:e5:86:0e:82:18:73:d9:17:c6:fd:
c8:3f:4d:17:5c:22:87:7a:bf:2b:aa:76:f7:d4:33:
4d:f0:b5:c2:2d:4f:ca:70:c3:7d:23:1b:65:27:ac:
4a:ab:13:ee:0a:6a:09:05:4a:d8:3d:f7:e1:87:e4:
d4:6d:ce:f0:93:ff:6a:56:d1:da:fc:da:32:c1:40:
f5:00:06:67:83:6a:76:3c:3e:43:a3:11:68:10:0e:
c5:10:64:9c:12:81:5c:45:b8:c6:61:20:97:97:fb:
13:0c:a5:e0:77:52:36:bc:c1:c2:dd:fc:f8:0d:65:
a8:1f:d2:3c:c0:28:7a:da:76:89:8b:7b:01:10:cd:
2a:cf:85:d7:14:c7:47:15:22:1d:6c:10:13:d7:ef:
b4:99:23:9e:b7:b5:8f:5d:23:88:96:c0:a1:2e:bf:
13:a5:ca:00:3d:c2:7b:39:ea:69:29:33:94:8c:6c:
05:21:33:a6:d8:d1:49:87:7b:29:13:e5:65:e2:6d:
a3:ae:23:26:4e:96:eb:51:2c:21:73:bf:f4:6a:6c:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:7C:F9:3D:C6:7B:AA:74:DA:CF:24:2C:DE:6C:79:7F:A8:40:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8c9495-e709-4a3d-babd-76ad54bfaaab/1/R8h8-T3Ge6p02s8kLN5seX-oQOs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.2.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210215
Signature Algorithm: sha256WithRSAEncryption
0d:15:71:7b:26:b2:95:e8:b1:4d:78:8e:9c:e7:4c:22:62:25:
48:35:9c:55:08:5d:f4:82:ce:f6:12:75:b9:69:29:3b:11:36:
50:fa:d6:ba:38:6e:11:a6:51:87:c6:d2:bb:a4:12:0f:02:01:
3e:f4:17:28:1f:6b:1d:73:34:a1:6c:1f:87:72:f2:73:e3:6e:
50:0b:7d:9a:90:09:3f:f8:aa:fe:a7:c0:ab:6b:d2:d6:03:29:
7e:39:dc:97:5a:68:15:67:8e:b2:1e:b4:b6:ad:20:8c:8b:3f:
b5:ea:6d:0d:d1:5f:bf:8e:e5:27:37:83:a4:99:4a:4b:96:b4:
0e:9a:39:86:4d:2f:19:59:ff:a7:60:ae:a2:8e:45:52:53:10:
58:0a:c8:94:49:ea:bb:1e:f8:62:26:41:87:64:b8:52:02:29:
81:ad:78:5d:33:05:a1:4e:fd:df:b0:09:22:c7:92:cb:dd:17:
62:dc:c1:de:76:65:a2:75:17:eb:de:0b:8f:86:a8:0f:e4:a5:
cb:54:d1:13:6a:f0:4a:9a:ae:29:5c:fd:73:27:73:b0:ac:73:
bd:c3:32:66:eb:cb:84:9e:f2:6c:90:f6:5b:73:e3:ee:4b:fd:
63:b7:1d:23:89:88:79:e1:25:0d:66:e6:d5:5a:57:38:14:57:
48:50:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:00:13 2024 by rpki-client on console-ams.rpki-client.org