Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
File: USOacCubRBGfwO-wBSTn3RLeqPY.cer (raw, json)
Hash identifier: GJQ2+/mC81cj3Rx5f1+onwZDHpsKQyI/JQjpTYRV/9w=
Subject key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DFB2C24DCAB9DD0313239BF7E3DC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42166
IP: 194.0.149.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fb:2c:24:dc:ab:9d:d0:31:32:39:bf:7e:3d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:55:93:55:05:3f:1e:8b:cc:1e:24:00:b5:
71:82:d1:7b:5f:29:aa:d3:99:dc:b1:1a:69:38:a3:
a8:2c:d1:98:ff:7f:63:7c:7e:ac:98:3a:af:dd:27:
90:c2:57:01:7d:fb:d4:20:31:7b:9d:ac:5e:48:f4:
f5:7b:e7:70:8a:bf:85:10:66:be:64:55:19:eb:19:
c8:da:c7:00:4e:7d:6a:c1:e6:43:d7:c6:4f:96:28:
50:78:27:2c:5d:55:89:fc:5f:d8:5d:40:1a:31:0e:
67:aa:41:3a:a3:ec:1a:6e:1a:29:cc:aa:5b:61:b4:
c5:67:b8:f4:ff:9b:e4:e7:fa:00:44:96:3e:ba:8f:
ad:f4:ea:1c:31:91:81:b3:88:e8:d2:0a:4d:22:65:
45:81:18:54:d1:25:bf:3d:22:5d:0a:12:16:ca:e7:
de:ac:9e:55:6f:48:30:ad:97:d3:45:71:05:f0:5a:
e2:af:02:77:8c:3e:ef:ad:1c:9d:6f:58:42:08:c5:
6f:50:29:6e:04:c2:e1:19:d5:70:ee:19:03:63:3e:
f2:2c:ed:3f:9c:77:d3:c6:e1:87:7e:52:0c:68:1b:
cc:4f:59:25:19:4b:b0:2f:25:1b:96:15:0c:78:83:
50:70:88:be:45:79:d7:95:84:44:4c:0d:b8:19:d1:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.149.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42166
Signature Algorithm: sha256WithRSAEncryption
66:49:c5:8e:2c:80:10:ba:f1:75:39:14:9b:94:96:55:ae:21:
8d:0c:22:6e:22:3f:b3:a4:e1:68:63:43:58:f5:35:ea:04:25:
07:94:71:dd:fd:82:fc:e5:26:f2:6d:5b:f6:1f:26:b4:f7:f0:
f4:7d:cb:18:2d:23:bf:c6:60:fb:2c:c0:10:20:02:b7:07:6e:
40:81:c5:f0:64:56:42:f7:ec:50:10:dd:e9:f0:29:19:04:9f:
b9:9c:25:88:4e:e7:16:41:29:f6:24:84:07:b2:ec:e9:c1:7e:
fe:4f:ef:c1:df:73:68:d8:95:3c:7f:ed:79:8f:25:b6:2c:0e:
06:d9:2c:c6:e2:cb:51:45:33:b2:09:51:f7:93:ce:2f:b3:25:
d9:e6:ee:59:fb:09:b3:1d:0f:d0:f9:42:72:27:3d:37:25:40:
a3:b8:f2:24:15:8b:64:36:4a:6a:24:f6:3c:da:c0:b5:34:e5:
79:7b:a4:50:9b:00:ef:86:07:98:ec:9b:0b:e2:80:35:28:f9:
72:6f:e5:da:96:23:1b:ad:8b:bf:57:f0:ec:dd:89:03:cd:43:
61:5a:21:bc:b4:de:5d:a9:98:f8:39:8d:a6:84:31:ce:6e:52:
61:80:38:23:75:50:9d:83:2f:47:9a:b6:da:48:30:ae:11:1a:
b9:d9:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:50:57 2024 by rpki-client on console-ams.rpki-client.org