Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
File: StzxlnKWX1GxbYevqxsUkILmw-4.cer (raw, json)
Hash identifier: 1pJ1P6yOAuOchXFp5PDtJDdA2KVVgyl+/xScfBdwdzI=
Subject key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50027893DCDA25631C63A87A850FFB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205174
IP: 185.217.220.0/22
IP: 2a0c:e200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:27:89:3d:cd:a2:56:31:c6:3a:87:a8:50:ff:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:30:56:4d:bb:16:62:4e:95:89:8a:23:4c:
e9:2d:e6:57:23:bb:c3:3f:32:60:6f:d4:c5:38:80:
3d:e8:8f:70:aa:7f:30:68:bd:06:51:47:c7:3b:d1:
71:73:11:b0:89:af:21:ae:6b:92:ff:a4:00:3d:ad:
98:16:0e:00:d1:48:dd:3b:55:80:30:ef:53:c6:bc:
fe:c6:0a:57:b5:2c:c0:85:74:ac:49:a5:f9:43:1a:
88:09:95:e8:9d:1f:70:b2:c1:46:82:d5:a0:a3:2f:
9e:80:db:7c:ba:c6:02:f5:d0:f2:b0:ea:72:40:0e:
99:fa:4f:e0:c0:8a:8e:69:52:f5:e3:89:bd:e4:18:
5a:81:af:3d:17:6a:75:9a:61:a0:86:f5:d2:c0:e4:
45:f3:09:0e:6e:2c:12:16:8a:f2:12:5f:69:29:6e:
89:35:db:bf:2d:95:41:f6:92:a3:d2:3a:c4:6d:05:
66:02:54:1d:27:a8:14:57:20:7a:7c:7b:0e:a0:c4:
f0:21:38:30:88:16:7a:2c:36:db:d6:13:66:20:70:
d8:d6:c7:46:c3:93:54:33:a2:47:e9:f1:67:a8:1e:
27:5c:f0:64:a4:ae:8f:ac:8c:96:f3:61:2b:75:6a:
15:26:15:4a:14:3b:f9:7b:eb:90:0d:f6:18:dd:0c:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.220.0/22
IPv6:
2a0c:e200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205174
Signature Algorithm: sha256WithRSAEncryption
83:eb:9d:2e:8f:f5:e4:ba:2e:fa:31:be:78:f8:6d:b9:77:d2:
38:6d:12:e1:8e:9c:42:82:85:07:bf:4a:b0:37:a7:1c:d9:b7:
af:36:95:72:d8:88:54:02:c2:22:5a:f1:19:b7:62:5b:67:b8:
3a:5b:e7:f5:60:29:c3:04:d4:c7:42:72:78:96:40:cf:8d:d8:
ce:7a:16:86:9f:17:58:cb:3d:df:a6:a6:b2:0d:fe:99:2d:29:
c4:df:95:dc:de:56:91:fe:f1:65:f6:59:53:fe:14:97:52:1c:
bd:a9:39:22:ba:51:e5:f3:b3:1a:7e:9a:59:0d:67:8f:af:0e:
63:43:1f:84:f3:70:95:c0:69:2b:35:44:9e:69:e4:22:69:e9:
d7:9f:e1:c3:33:de:00:c0:02:17:ff:44:bc:16:b9:e5:a9:7a:
e3:b1:e8:df:ae:f5:7c:1a:fb:5b:d3:b6:86:da:86:71:d8:31:
b9:cf:b4:df:07:48:e2:72:4b:1b:a6:c0:e6:7f:69:98:8b:cf:
9f:33:90:77:04:56:a0:71:fd:2b:f2:21:10:1a:06:d8:96:83:
a1:92:11:48:ee:70:8c:be:4c:51:98:ea:30:5f:1d:c9:da:cb:
b8:91:ca:3a:86:33:c5:97:50:63:fc:c1:6d:35:e3:7f:2d:dd:
22:39:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:16:09 2024 by rpki-client on console-fra.rpki-client.org