Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
File: SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer (raw, json)
Hash identifier: Zp4PIdvdTdGCjoViwkPApIf4pYdPIy427xM9TlDkTVw=
Subject key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D092AFA0B50BF1E36ACC94B4F54BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59708
IP: 185.4.104.0/22
IP: 2a02:6ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:09:2a:fa:0b:50:bf:1e:36:ac:c9:4b:4f:54:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:c1:04:c4:ee:2f:96:e6:2d:a2:08:ca:09:
dc:15:1d:80:a0:22:90:50:25:3d:b7:56:73:b7:12:
0c:bd:73:92:b9:a1:0d:df:66:e9:e0:88:87:8a:f3:
42:77:35:2f:e1:7b:1b:a8:8f:f1:90:0f:83:77:d7:
36:cd:92:94:9c:8a:eb:a1:d7:fd:e1:59:e1:b7:29:
45:1a:97:7e:1d:7b:59:cb:cb:9f:bd:b9:2b:ed:e7:
dc:23:50:32:fe:33:c5:2a:f5:99:2f:37:48:f9:c8:
65:9b:7d:be:1e:da:41:dd:65:90:49:e5:da:93:62:
ba:c5:c0:fc:d5:1c:33:7d:1e:8c:78:f2:ca:b1:c6:
16:ac:c3:79:27:4b:6f:d3:31:f4:f8:a0:5d:c0:55:
a8:52:ed:9c:96:17:cf:58:6c:7f:16:50:33:77:e6:
3c:b1:6b:d9:56:ef:91:56:5a:8a:a5:63:12:09:d2:
f4:41:42:6b:ac:37:d9:bd:af:02:c0:77:bc:90:ad:
f2:61:51:77:66:92:f7:db:c1:37:3f:ce:cd:a6:b8:
2b:f4:f4:a5:b1:d8:d5:aa:b3:dc:d4:f1:dc:e9:e4:
c1:35:c4:4f:82:00:3a:9b:d7:b4:79:f1:8d:5c:40:
7a:7c:09:41:12:8d:78:6a:f3:e1:3e:4e:e8:88:8b:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.104.0/22
IPv6:
2a02:6ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59708
Signature Algorithm: sha256WithRSAEncryption
13:6d:ac:5e:15:d7:04:c6:24:c3:8b:31:1c:86:eb:c4:7a:20:
2d:0f:82:0b:b6:33:1f:6d:fd:3f:d9:fb:07:c4:79:19:06:b2:
c0:00:a3:66:cf:43:08:00:ee:78:fa:83:aa:30:a3:54:63:64:
a0:12:ca:c3:39:89:a2:27:40:af:c4:d0:71:95:cd:78:fd:6e:
0f:18:67:1a:f9:e2:5f:55:b4:7e:f1:5a:7f:9a:37:e2:f7:91:
e7:29:dd:be:8a:eb:10:a4:5e:20:aa:92:7b:27:b9:0b:e3:13:
db:2a:d2:7c:39:e9:5f:51:51:32:43:d7:be:cf:e4:18:e4:b8:
b4:0e:fd:33:66:26:63:7d:ed:cf:36:6c:eb:76:4a:20:77:86:
7c:7c:eb:77:cf:72:74:21:11:8d:04:f0:72:f4:e9:58:52:1b:
fe:ac:78:ac:c7:a7:a5:c2:7c:c6:d3:73:0f:7d:7c:af:b5:e7:
23:fa:47:62:4f:57:a1:56:9c:57:3c:f4:4d:2a:43:14:a1:f5:
ff:84:be:7b:ee:d4:22:2e:ac:0f:6d:41:fc:e5:d0:1b:5a:3d:
60:94:1d:e0:d7:b9:6c:20:c3:0a:7b:81:ad:1b:ac:42:86:d8:
a7:6a:5e:a9:7b:e9:2d:f1:27:cf:f4:ea:d7:42:8a:17:8a:aa:
fc:d0:6d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:59:48 2024 by rpki-client on console-fra.rpki-client.org