Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.cer (raw, json)
Hash identifier: KH3p0zbwlvUPo08CCZAvdV1FgjPFRUPMWhFF84RjANI=
Subject key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794E4973B2712E9F95C7DE2BC36B578
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49188
IP: 185.163.244.0/22
IP: 2a10:9d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e4:97:3b:27:12:e9:f9:5c:7d:e2:bc:36:b5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:a2:2c:1a:66:b1:49:b9:73:ed:75:fd:e5:
83:95:86:64:50:3a:84:4d:eb:b7:21:6e:b5:97:e6:
3c:6c:d3:6d:1d:51:1d:f9:e6:31:97:03:66:b9:0c:
d9:26:af:5f:35:e6:a7:15:d0:63:61:46:0f:13:ce:
66:5e:be:e8:17:23:98:f7:4e:8f:a9:74:7f:eb:e8:
d1:10:d7:93:a9:69:91:4b:84:ad:23:94:73:6c:61:
bb:98:18:75:36:79:f4:d1:88:aa:5f:2e:81:c4:4b:
6d:77:9c:07:4f:73:33:ea:c2:1b:d9:f8:17:8d:1e:
ae:bb:a2:e1:4e:83:4a:a0:49:63:de:fc:b5:f3:60:
f8:63:c3:de:69:c3:20:94:f9:86:db:fc:78:c1:4e:
3c:52:01:5a:9c:9b:c7:fd:13:bd:9a:e4:ea:e9:d1:
26:dd:93:76:af:0e:b2:3b:90:d8:6d:83:09:a0:71:
ae:52:d2:ed:00:78:8f:1c:a6:4e:eb:41:33:98:a2:
61:6a:2f:aa:c4:fb:00:f3:68:59:f3:15:28:27:a4:
cb:df:08:af:59:2d:9d:cb:16:f2:f2:41:fd:ac:df:
1e:eb:2c:68:c9:8f:af:84:94:9f:70:c9:05:e8:31:
af:1d:6a:69:d2:23:eb:91:d3:5c:54:3f:4b:f5:77:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.244.0/22
IPv6:
2a10:9d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49188
Signature Algorithm: sha256WithRSAEncryption
73:9f:45:65:7e:f1:0d:7c:10:cc:46:fc:75:28:74:d2:d9:e2:
e7:ed:8d:f2:b8:dc:aa:4b:75:af:35:79:13:df:db:d4:40:8a:
e7:ac:1d:f4:ba:a7:61:89:b0:60:78:ec:d9:9e:d0:29:b9:03:
60:5b:0a:fe:f3:1d:d9:76:75:90:cc:f3:2f:39:48:36:8e:5f:
6d:fe:ad:36:20:b5:33:b7:c4:24:a9:8f:3e:3e:ce:33:83:33:
88:42:69:63:fe:f1:bd:80:6c:52:00:44:ec:bf:ff:5b:35:16:
81:b1:5a:cf:d2:61:85:10:63:b4:7a:76:9e:b0:00:91:3f:e1:
7a:83:6b:40:e8:97:aa:1b:cb:52:01:38:11:b9:1a:25:86:58:
6a:77:4b:e8:ee:a5:a8:a6:17:02:ef:4b:2c:24:52:3f:ea:b4:
c2:93:33:8f:a9:3c:43:05:e7:85:f2:ae:d4:d3:6b:63:6c:f9:
fa:98:51:1e:f3:15:26:e7:ef:ba:a5:42:f9:ac:28:e3:18:47:
70:0c:76:c0:9f:67:d9:d4:d3:2f:07:39:70:44:78:6d:3b:6a:
23:87:29:3a:5d:5e:e7:62:df:e3:6a:5c:e9:02:f7:74:86:e4:
90:1a:61:09:bb:89:8b:bb:39:ca:71:ee:31:d1:ec:45:24:b7:
6e:af:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:47 2024 by rpki-client on console-ams.rpki-client.org