Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
File: SeMF15ys2--_HoMrNNfAa7tfYno.cer (raw, json)
Hash identifier: /seveuOsMUZNXp9dbF+N8OazMMAFRE5wTuAtvHvjAXs=
Subject key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E0D2CB045E129353F240C10CD77B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60868
IP: 185.25.32.0/22
IP: 2a00:77e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0d:2c:b0:45:e1:29:35:3f:24:0c:10:cd:77:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:4a:e3:94:d0:e3:d3:8b:c5:24:dc:bd:42:
b5:46:a8:47:4b:13:d2:17:85:52:6c:bd:47:1a:08:
0a:2b:28:5f:34:29:39:e3:44:1c:05:63:77:9d:ca:
f3:f2:2a:b9:2c:1a:27:1a:b4:f8:76:83:88:28:e5:
9b:bb:a9:4a:fe:20:8b:25:6d:ad:7d:0e:82:b2:7a:
2e:f8:dc:ab:f8:42:4b:11:18:e4:d1:c0:98:d1:94:
6d:c4:32:35:1f:51:3a:94:bb:62:2d:44:4d:39:f1:
6d:fe:d0:d3:ac:1c:de:bf:b5:3f:14:b6:94:29:d1:
ae:ba:39:6f:a1:35:73:6c:14:17:62:e3:0a:7c:2e:
b9:9a:24:f7:9a:90:e8:07:21:47:b1:35:94:c9:93:
5b:fd:13:56:f3:d7:f9:31:06:3d:e2:bc:1d:98:03:
74:7e:34:77:32:93:07:c2:57:38:f8:bf:f1:3e:27:
97:3d:c1:22:c6:7b:8a:70:14:cf:fd:c8:13:18:ef:
70:7e:65:8c:85:29:ec:34:46:2b:6f:3d:97:4c:ac:
7d:bd:55:27:e9:53:49:01:d9:c8:8a:6e:b9:8b:93:
9c:3e:02:0c:0f:da:81:3c:6f:f9:6f:42:25:7d:71:
8b:4e:d9:50:cc:d9:1a:4b:95:3b:ed:ec:17:a5:5a:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.32.0/22
IPv6:
2a00:77e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60868
Signature Algorithm: sha256WithRSAEncryption
52:e1:41:b7:41:a2:7b:0b:d2:16:28:09:e4:f0:9d:3b:2a:6a:
0f:ed:de:0f:d9:65:51:2a:c6:ac:db:b1:1c:af:62:6b:f9:a4:
d0:f3:08:38:78:43:90:73:a6:54:77:d4:6f:19:f4:bc:f3:4f:
5d:b2:13:97:48:b5:5b:f2:a3:1b:14:cb:90:85:8f:f7:0a:d7:
59:58:69:1d:1f:e4:40:bb:cd:ac:fd:00:75:9e:f7:d7:74:7e:
f8:37:52:95:ea:32:b5:db:bc:62:71:77:55:43:73:25:9f:00:
0a:92:98:ca:bb:cc:e7:98:29:0b:32:4b:43:6a:8f:55:b7:51:
58:2d:52:1a:87:81:2c:36:db:9c:f1:0b:0c:e4:aa:14:c9:24:
8b:8f:0e:10:db:ec:66:01:36:07:0c:3d:bd:7a:c5:6e:68:56:
97:d4:43:70:fa:c4:c4:d9:6b:7b:8e:19:b8:f2:4d:db:51:cf:
e2:25:02:66:2c:11:bf:c1:3b:a0:8b:20:10:b9:08:1a:a2:d5:
72:72:3e:d8:80:ad:94:da:c6:3c:82:ed:bc:49:46:3e:bd:10:
a7:09:17:89:85:69:91:6b:63:ac:f4:21:17:66:b9:50:81:dd:
6b:0c:0f:6e:32:6b:a6:c4:5b:49:63:5d:47:7e:51:5c:07:76:
d6:d5:6a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:15:55 2024 by rpki-client on console-fra.rpki-client.org