Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
File: SB_i792qAKxeR9HC1UsEuWEHqUU.cer (raw, json)
Hash identifier: zfPB86pEn9P4PhnWnbCz3OSWYRjDpg23zGTbZLzx9y0=
Subject key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F9B0A1F98C204FE8DD089104F67E57EBE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 May 2024 12:04:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57268
IP: 195.60.220.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:0a:1f:98:c2:04:fe:8d:d0:89:10:4f:67:e5:7e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 12:04:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:34:9f:88:36:23:fe:31:15:c6:40:bf:67:
af:1c:4e:fe:6b:28:8c:14:78:9f:d8:77:7f:13:17:
c8:51:17:ba:8a:b7:5a:a8:20:23:ed:8d:6d:16:67:
3f:0e:30:db:7e:55:39:34:6c:d2:4d:f9:2f:6e:51:
e2:8d:d6:77:4b:69:9b:1e:c3:40:7c:b5:da:07:6b:
af:97:db:a6:bd:8d:4e:18:a8:4a:5c:75:6d:5d:ba:
4e:a8:77:e3:c2:85:49:4f:46:07:8b:af:a6:bd:d6:
90:f0:f1:32:1c:d7:2c:4c:9a:e4:f8:49:73:de:d6:
cc:05:78:37:f9:b9:51:02:82:27:2f:06:7c:5b:37:
05:70:2d:36:fa:da:15:68:8c:47:21:f2:3b:b2:8a:
52:ca:36:9e:5f:89:ca:bc:d8:82:21:39:5e:dd:1f:
1f:f6:44:b6:5f:01:61:cf:06:de:47:22:70:6b:fb:
11:2c:6b:03:2a:47:2f:1a:86:f2:45:85:b3:ce:a4:
86:26:b2:aa:a3:96:6c:a8:39:66:e5:58:45:8e:83:
21:d0:0f:27:2a:8c:9f:42:f6:12:03:90:22:c5:c0:
28:0d:83:21:8d:51:f7:b4:cc:15:0b:91:76:ad:b5:
82:9e:79:94:ca:db:33:86:0b:cd:a8:c3:3f:2b:37:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.220.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57268
Signature Algorithm: sha256WithRSAEncryption
1b:70:55:8e:ab:7f:a3:43:cd:e5:c1:00:9d:ef:36:64:3f:92:
28:5a:3e:e2:43:4f:38:12:0a:31:a7:01:b0:2c:af:99:de:45:
e2:f1:c3:37:56:ae:32:c7:35:ee:b7:28:2b:93:af:cf:c1:14:
bb:68:87:93:5c:17:31:8f:be:7f:dc:ff:a3:c9:4e:ee:f8:1d:
35:0a:6a:99:13:29:41:67:0c:b1:c3:98:3d:70:24:2a:84:7f:
1f:7f:0c:38:21:3e:4d:90:3a:e6:14:0c:36:59:c8:52:8e:1e:
ba:33:7e:bb:75:16:53:bb:13:14:c5:9c:45:cf:fc:4b:fa:a1:
70:7a:43:89:97:6c:18:30:d5:f8:27:52:b6:18:f4:1f:2f:5b:
32:6c:01:3e:ab:ba:18:74:0b:0a:92:3f:93:5c:c1:05:ae:15:
51:34:b5:61:f2:68:fa:3f:79:ff:eb:d4:9e:77:18:e4:4a:53:
6b:d2:dc:1d:45:ee:a1:3a:e0:cf:4e:ec:5c:af:1b:83:4a:a0:
f3:58:e7:16:19:f7:eb:ce:0b:49:69:59:99:c5:9b:1c:8c:3a:
f4:ed:30:c9:42:37:ca:6d:35:4f:f6:e5:0a:cd:ca:9e:f0:65:
20:a6:48:b0:5a:45:f8:36:7c:e7:3e:3b:e7:33:98:14:a3:31:
4a:0a:47:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:02:22 2024 by rpki-client on console-fra.rpki-client.org