Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer (raw, json)
Hash identifier: QZEbo34wIpNBisdwA8CKEOKybUXBD2eFn/Y8pbJrKTU=
Subject key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E75FF552AFE61F4E8C2251EF755617A01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 25 Mar 2024 14:24:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47723
IP: 92.246.148.0/22
IP: 93.90.220.0/22
IP: 185.58.220.0/22
IP: 185.236.208.0/22
IP: 2a02:6620::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:ff:55:2a:fe:61:f4:e8:c2:25:1e:f7:55:61:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 14:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:dc:17:33:16:f1:1b:02:46:0d:ea:3c:04:
f7:32:8e:97:9d:d1:a5:3e:6d:3f:40:b5:ab:29:3d:
3b:5c:f0:92:81:20:65:42:fc:b5:b3:62:af:51:12:
84:5f:2f:b2:12:09:b7:1e:18:c2:15:d1:f2:ba:5a:
fd:c9:92:78:25:f7:0b:76:f1:59:1a:d7:ae:77:ad:
60:0b:7e:ca:82:f3:7f:7c:a3:8e:64:37:c7:40:63:
0d:30:e9:37:c5:0e:67:ba:f0:54:55:b5:4b:89:ce:
98:e9:f1:38:8b:a7:b6:db:b8:da:18:34:8e:d1:0f:
0a:66:2f:85:25:c1:23:52:1c:95:16:48:3a:c4:0b:
bf:6b:52:1e:5b:a8:5a:2d:f1:a8:ec:28:fd:7b:f7:
69:40:1c:e7:25:72:ad:29:b4:bf:04:77:f3:32:ed:
c4:7d:6f:e7:47:1a:47:71:b5:a4:7f:46:14:34:38:
70:61:74:fe:4e:64:73:43:7a:be:4c:91:c0:ce:6d:
88:a2:b4:13:8d:a2:96:07:85:86:45:e4:41:31:ef:
2c:0a:cc:a5:45:7d:85:49:69:a7:2b:72:f6:bd:dd:
36:e4:01:9c:ec:a8:82:76:5a:d8:ff:e9:78:d4:48:
fb:e8:4f:10:e4:51:60:cb:8b:81:13:9b:78:c9:7d:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.148.0/22
93.90.220.0/22
185.58.220.0/22
185.236.208.0/22
IPv6:
2a02:6620::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47723
Signature Algorithm: sha256WithRSAEncryption
58:57:48:2c:61:b8:d8:f4:38:61:3d:ed:fa:58:60:9f:57:41:
ad:73:83:31:0b:b7:20:71:7b:ed:5c:ee:86:bb:2b:81:11:f2:
bb:46:da:6f:d1:b8:1e:68:88:80:6e:f1:8a:1e:84:38:38:26:
a7:5f:82:9b:9d:cb:8c:d9:f5:df:fa:9a:4c:8b:20:ef:3a:c3:
0f:ef:8e:98:fe:cf:a9:c2:92:5d:fe:1a:44:ca:f9:09:68:b6:
87:14:ad:ce:62:e4:f4:62:ea:6e:a8:af:f9:d7:3b:93:53:3b:
3d:28:f1:50:ff:bb:6e:d5:8c:95:9b:26:5f:85:25:1e:02:a7:
4a:93:2a:0d:93:9e:b5:6d:8e:e7:25:e5:95:44:61:21:d5:a6:
54:63:21:0d:75:b0:1e:35:73:51:88:c7:9d:f4:dd:76:78:9d:
b0:80:e1:d6:ec:9f:d8:9a:7b:c0:9a:29:06:19:ac:84:df:24:
3d:36:50:85:da:d3:e4:d8:93:9c:c8:f1:ad:05:1c:d3:ef:50:
61:65:06:71:97:8d:19:0c:d7:af:33:7d:82:1d:28:a0:ff:79:
13:60:82:06:3d:a4:9c:0b:d1:fb:cd:be:9e:55:ef:39:cf:da:
63:18:b4:a9:a5:56:66:3b:3d:6e:de:de:56:6e:b5:22:a4:a5:
e7:44:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:44:32 2024 by rpki-client on console-ams.rpki-client.org