Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
File: aDg_-p8gvwIcCQJimUIS1xZn7QI.cer (raw, json)
Hash identifier: Qdb1/o5gW+0YQM607UXzTzXpG1b2RNBGx4hD8ezdK2o=
Subject key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7934A8416545C435035AAE9A36794A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25048
AS: 48901
IP: 81.90.128.0/20
IP: 2a00:e20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4a:84:16:54:5c:43:50:35:aa:e9:a3:67:94:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68383ffa9f20bf021c090262994212d71667ed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5e:1d:84:e3:25:ed:aa:50:81:bc:41:78:01:
8e:33:d4:20:6b:35:eb:0e:b7:a1:39:cb:49:91:fa:
83:72:ff:44:03:52:70:7d:14:b2:a3:18:93:2a:c8:
13:e9:04:e3:d5:f7:ea:7c:98:bf:4c:cb:7d:d1:7b:
c0:c4:27:f1:4b:15:49:aa:5c:a1:1e:2d:95:fa:fa:
0c:fc:3c:72:d0:05:c8:f9:9a:79:c2:98:9e:78:5b:
d1:16:5d:92:79:ef:ba:d7:08:58:3a:cd:45:40:4a:
56:41:d2:73:02:56:82:f1:64:1c:27:dc:9e:79:b3:
b7:91:cc:c0:54:54:84:4a:0a:75:0c:8d:7c:39:1e:
e9:b0:02:5f:be:8b:5f:f4:3c:e4:e7:8b:0e:19:5f:
3f:b6:1a:20:3a:bc:b1:b0:da:ab:d9:27:0f:a1:6e:
40:e3:13:c9:a1:a4:eb:97:93:a6:39:9f:df:b6:c3:
73:f0:47:a2:21:e2:61:bd:cf:c8:6c:0d:d1:a2:d8:
cf:ab:c8:6d:e5:1b:8c:a9:6c:0c:5a:2a:0d:61:ed:
ff:0c:57:cc:b0:4a:8b:6d:98:30:e6:08:e0:86:82:
99:2c:fd:a3:da:5e:d9:dc:93:c4:4d:55:4c:2a:43:
81:2d:63:97:45:c8:f9:98:dd:0c:3c:76:e4:fe:41:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.128.0/20
IPv6:
2a00:e20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25048
48901
Signature Algorithm: sha256WithRSAEncryption
81:5c:9d:65:c7:9e:28:ef:e0:28:4d:4e:15:f9:0c:c5:6f:b7:
9b:4e:69:0d:ac:a5:8b:fa:35:f7:46:91:5a:89:de:4b:f8:2f:
31:72:ee:79:49:f0:25:db:a2:fc:86:34:17:01:21:be:96:64:
ab:13:67:10:fa:17:ba:05:35:06:50:e8:06:32:56:11:60:23:
7b:d1:71:ae:7e:d2:9e:85:e2:18:69:08:ad:01:d8:14:65:f4:
23:8b:c7:01:2b:3a:98:45:ad:97:87:81:85:d3:3b:3c:55:28:
30:3e:74:6c:7c:3a:33:32:1c:1b:0f:8e:7d:26:9d:cd:06:71:
50:21:2a:05:bd:9b:fb:81:19:1c:6c:d4:f5:7d:e8:85:a8:84:
68:a1:b1:30:9a:70:ea:41:fa:07:e0:e4:a7:44:27:00:00:3a:
89:c8:b2:41:86:f1:82:88:5f:73:5e:66:93:87:4f:37:4f:7c:
a2:83:5e:0e:ba:81:fe:a8:2f:04:5f:dc:15:ad:4b:3c:62:9e:
46:2c:23:97:e9:b2:86:d4:84:75:b9:da:db:a1:ec:85:67:f1:
ba:3c:23:fe:a7:24:e7:fb:02:ab:14:ef:f3:d4:d4:7c:a5:58:
6e:48:9e:f9:aa:69:72:8b:51:c7:20:05:57:06:88:a3:ba:9b:
e1:54:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:52:04 2024 by rpki-client on console-ams.rpki-client.org