Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
File: SkB8o6avRpoxu1IDD82RHJHmbBs.cer (raw, json)
Hash identifier: Y1PrPf1oTKmzaSgHguaCkQCQKayep1pJH+c0sWyvJyU=
Subject key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA96E4A8C20D7357BBBF3CA8D89D3990
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:32:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8803
IP: 193.5.172.0/22
IP: 193.8.176.0 -- 193.8.181.255
IP: 194.124.217.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:e4:a8:c2:0d:73:57:bb:bf:3c:a8:d8:9d:39:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:0c:d9:85:4f:1c:8f:53:a0:94:23:d4:a0:
66:97:1f:12:d2:15:17:f9:7f:c4:b7:43:eb:66:4f:
82:66:cf:d3:ff:62:ce:88:86:55:76:28:55:13:9f:
26:35:37:33:a4:d2:1f:26:a1:67:9e:bd:a5:dc:ef:
79:6f:f8:04:b5:b9:a0:47:7a:8c:ac:e8:f8:c3:22:
09:9b:e8:27:9f:a2:49:46:bd:02:4a:03:60:f3:7f:
5e:46:b8:da:34:06:c1:31:bb:09:a8:76:28:07:bc:
87:a1:3c:30:3b:ba:7e:ed:bb:63:15:1a:7f:f5:7d:
3f:43:bc:99:94:90:3d:96:3e:aa:e8:26:52:45:aa:
57:4f:fc:6f:60:9f:7e:2f:9b:19:bb:48:3a:a5:2f:
96:6a:72:29:91:e1:ad:8f:9a:0d:b6:b5:f4:59:39:
b3:03:46:73:e2:af:64:6f:c8:b6:dd:72:02:93:e1:
7f:c3:a4:c5:5c:b3:a1:50:af:d1:11:42:3d:56:7a:
8f:c2:0d:2a:61:c4:2f:51:cc:c3:ff:b2:d2:ed:38:
41:38:3a:6a:0a:07:04:da:53:0e:9d:2a:9a:66:e0:
37:b7:4b:14:d1:77:34:a3:61:89:29:ab:b2:5f:55:
fe:19:21:37:87:dc:6c:61:1a:70:98:39:f2:be:dd:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.172.0/22
193.8.176.0-193.8.181.255
194.124.217.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8803
Signature Algorithm: sha256WithRSAEncryption
9f:ee:dd:89:af:3a:3f:c9:3b:81:c5:33:81:2e:a6:15:10:2c:
ef:d3:84:17:97:96:86:d7:96:2a:1b:b2:58:ea:6f:aa:56:f9:
60:4f:74:28:b8:1f:0b:d6:fa:80:79:d4:d8:7b:59:9a:f0:41:
1b:12:52:e3:31:35:e4:4d:3e:12:77:a7:27:23:25:02:8c:18:
2d:63:08:bd:64:be:98:34:0b:19:ec:02:f4:55:6a:80:50:7b:
26:e2:13:6d:c9:0e:d5:c2:5a:79:7f:4b:d1:f7:85:da:b7:de:
7b:e1:f3:13:93:37:e8:04:78:0f:79:bb:77:1f:31:b0:e8:29:
79:14:06:40:0f:4f:b3:9a:8a:7a:af:ed:0b:44:ee:e9:47:bb:
eb:26:44:5b:96:70:dc:76:ac:30:4b:ac:2a:9d:0b:47:01:84:
c1:2b:b3:06:2d:93:4b:18:7c:e2:97:da:bf:6f:28:5c:2f:d0:
51:36:a3:38:7e:30:1a:97:8d:cf:79:aa:ba:2b:84:21:9a:4d:
88:0e:ba:49:53:c6:df:98:43:a4:19:14:76:cf:b4:46:b0:25:
56:56:e8:53:72:b4:84:f6:1e:14:97:3c:b4:14:88:82:90:a4:
77:5e:d9:9f:2d:e0:35:05:f1:45:1c:be:d6:7e:76:91:c8:9d:
55:f6:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:16:00 2024 by rpki-client on console-fra.rpki-client.org