Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
File: S2HMijZcxAOCox2tVPbLcj9YdYo.cer (raw, json)
Hash identifier: JceY+HFZNe6tUdarYblokJEtpNeN/E1jt6u1nfqbNis=
Subject key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801AC83935903A7A1890815F1F6511E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42339
IP: 46.28.224.0/21
IP: 77.72.120.0/21
IP: 185.22.204.0/22
IP: 2a00:60a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ac:83:93:59:03:a7:a1:89:08:15:f1:f6:51:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:9b:9f:2d:e8:84:2b:1e:59:1e:a6:0f:07:
08:9c:1c:43:ea:64:18:e5:bc:0c:bd:d9:b7:51:f0:
2d:64:f1:10:c7:c4:8e:51:9a:34:f1:53:c8:47:31:
29:02:9c:72:52:ce:92:1e:aa:f7:13:95:8a:2a:8e:
50:03:35:b2:d0:bb:27:75:10:28:46:20:ff:e3:a9:
0a:53:cd:52:9a:76:36:50:86:89:9a:4d:8e:42:1f:
e2:2a:27:37:97:52:18:3c:b3:5b:78:fd:68:e2:a5:
f0:8d:09:f5:65:ad:12:de:7e:ec:a8:be:50:11:92:
35:3a:68:8d:95:80:ee:d9:5a:a4:ae:a1:0d:22:6f:
70:9d:a4:2e:00:79:70:88:53:5b:d0:ab:e1:a5:06:
e1:8f:16:14:1d:9d:0b:e0:ac:c7:5b:c8:a3:c5:e2:
13:9b:bf:bd:d5:ca:0e:17:95:86:49:47:50:0f:90:
79:15:d1:11:68:64:f1:29:c1:1f:e2:e1:11:e9:23:
7f:f2:c5:68:cf:fb:e3:71:3b:13:3c:96:39:ac:44:
89:66:d9:98:9d:a6:17:9e:e3:87:e3:bc:0c:c4:ff:
91:57:ee:85:e5:28:70:85:b5:c5:cf:18:02:d0:67:
f1:55:56:b2:5f:6d:87:ab:d8:b6:25:ff:0d:6b:89:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.224.0/21
77.72.120.0/21
185.22.204.0/22
IPv6:
2a00:60a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42339
Signature Algorithm: sha256WithRSAEncryption
75:56:33:73:ba:36:3d:84:05:f3:b8:ce:9e:9a:c3:3a:d8:45:
92:b8:25:2e:a9:cf:35:71:ce:3e:2a:57:75:ba:be:59:9e:03:
05:ec:34:25:a6:5d:bd:d1:a2:1c:81:16:c7:0e:7b:78:a5:2a:
62:98:b8:fd:a6:03:41:2e:b5:9a:a0:58:48:7b:d7:44:60:b3:
dc:66:e6:74:36:12:22:d5:ac:0a:f2:6d:55:a7:0d:92:12:9e:
f2:61:09:f5:fc:cd:36:55:9b:ef:85:da:38:5f:ee:44:ae:5d:
d6:4e:af:1e:71:f0:b4:69:82:5f:10:eb:e9:31:8b:99:03:7d:
e0:bf:2c:21:2f:12:ca:41:e3:c4:3b:17:15:9c:2d:90:20:37:
a2:3b:94:f2:fb:85:2d:72:0a:5c:59:4b:3f:ae:5d:be:9b:c1:
7d:56:eb:d1:64:c7:92:76:dc:d2:d8:4d:8e:f5:70:b7:5a:33:
5c:33:2e:30:c1:4f:70:58:15:ed:2d:0d:ab:90:84:c8:f6:50:
fd:88:42:9d:b8:29:41:12:b4:39:14:37:4d:99:fb:ed:a4:78:
ea:85:53:71:b5:2c:ae:97:88:05:5a:7c:07:e4:8a:22:a1:cc:
fa:36:eb:b7:3d:56:cf:04:7c:2c:26:fb:8c:98:44:0a:95:f2:
9d:b3:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:13 2024 by rpki-client on console-ams.rpki-client.org