Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
File: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer (raw, json)
Hash identifier: JASZxqtZYWFHY8pg3D3GiUOY1xA6lsCDJ9/MGSiQmgc=
Subject key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A6211BD3FD715C57DBA65E7E563F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57698
AS: 211360
IP: 193.84.108.0/24
IP: 2a10:ba80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a6:21:1b:d3:fd:71:5c:57:db:a6:5e:7e:56:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:36:09:91:ef:74:8b:73:69:bb:d2:99:8a:
40:1c:8f:08:90:89:ab:7c:f9:5e:0d:df:33:6d:24:
74:cc:9b:15:64:8c:c8:c2:33:3c:c1:48:e0:09:86:
d5:f8:6d:72:27:82:69:a8:07:9c:7f:2c:2b:19:1d:
96:5e:cb:e1:24:a9:9b:88:9f:7b:26:0d:16:b7:34:
86:3e:e0:a9:90:2a:0d:69:ce:42:f6:ef:45:c0:2e:
72:8b:30:df:5b:30:21:14:35:b6:2e:71:60:c7:58:
e6:95:27:0f:90:8f:63:9b:3e:05:18:9f:c1:bb:75:
74:0f:b1:4d:aa:ed:a6:f8:87:06:2c:46:aa:2b:1b:
76:ec:36:a4:c4:80:27:a0:0d:8b:c8:a9:7e:7a:06:
72:fe:97:2a:d1:3c:c7:f3:36:61:5d:88:db:46:d5:
8e:a9:2c:df:3f:ff:d2:bb:25:9a:ee:4e:49:c9:97:
5b:9f:3a:36:34:a8:dc:20:ed:0b:8a:b2:5a:cf:0c:
8b:a3:d8:59:b8:63:3f:fd:55:ac:2e:f7:48:5c:bb:
ae:93:34:6e:11:ef:ee:0e:cd:e1:a5:03:b3:67:7d:
5d:0c:3f:dd:d6:11:9e:f6:64:13:93:04:0b:6a:22:
94:32:25:89:01:dd:b9:ae:35:4d:c0:2c:2a:3d:bc:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.108.0/24
IPv6:
2a10:ba80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57698
211360
Signature Algorithm: sha256WithRSAEncryption
2c:23:52:c6:c0:b3:67:4c:99:2b:71:25:42:da:e8:0d:64:b4:
35:61:c1:82:0c:47:ad:e3:99:a2:80:9b:e2:87:3a:08:42:56:
0f:83:6e:1b:3d:db:8e:da:fa:2b:28:ad:ee:00:64:dd:86:1c:
90:6a:ec:00:75:f4:32:9f:21:9c:ca:a7:32:7d:5e:9b:84:1c:
3c:26:91:6e:d9:12:99:d2:93:68:ef:37:ba:78:29:87:7c:02:
f2:d4:0d:73:e1:b4:59:80:d8:7f:fa:38:8c:5f:8e:4e:2e:1e:
ef:9a:fc:d9:7d:02:f5:f3:77:fd:54:f5:9b:00:52:5a:2e:ea:
33:07:09:86:e2:fc:80:43:9d:4e:57:46:12:2d:c8:17:e6:e3:
05:e9:ef:aa:98:2f:67:25:f7:a0:08:04:d4:ca:aa:f0:f8:e6:
ec:a6:d7:05:e8:37:8f:c8:80:25:f4:3b:32:7d:0a:93:8d:ac:
a6:34:d7:c3:5c:3f:cb:be:1d:04:ee:88:57:e2:1a:3a:d1:49:
3b:bf:db:23:72:d9:f5:85:f8:7b:8f:a2:95:c8:c6:9f:25:19:
a0:60:16:4a:3d:9e:7f:3e:37:d0:14:8e:e4:97:28:a2:81:c6:
bf:9f:17:d5:9f:dc:52:24:dd:62:55:98:dd:ad:7a:f8:05:65:
d0:41:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:07:17 2024 by rpki-client on console-fra.rpki-client.org