Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer
File: aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer (raw, json)
Hash identifier: cdVNQTA43ww8WU/9TeXlnfWFr9fb6I3zqZzDtKC/jPk=
Subject key identifier: 69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492447C188FCEA696E4149FA209F557
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205073
IP: 185.231.0.0/22
IP: 2a0d:b300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:44:7c:18:8f:ce:a6:96:e4:14:9f:a2:09:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=695dce5e37a862538a0f66883de206ffb7c93b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:5c:61:67:98:39:a4:1a:f6:fb:1a:35:47:
8e:21:eb:3c:0e:ce:b6:61:0d:33:dd:a1:37:98:bd:
05:1e:44:55:1c:cc:ae:e2:85:41:ad:63:a1:88:25:
4f:0e:6b:1d:c7:ea:36:c1:0f:98:e4:9b:1a:36:9b:
72:46:5b:80:97:2c:33:1d:4d:88:59:56:42:6e:1f:
05:79:fc:cf:fa:ba:70:6b:06:5d:0c:61:28:85:ce:
02:27:87:08:8d:2c:82:64:8e:16:3a:3b:ee:2d:d1:
c6:f9:24:62:39:7c:82:1d:77:22:c6:a6:24:96:ae:
02:a3:19:37:b0:95:b4:61:1d:9a:41:19:37:91:df:
8a:23:00:d6:a5:c6:68:f7:a3:19:84:da:dd:1e:c5:
0d:6b:95:7a:e8:f6:e0:f0:b6:7f:e2:98:ca:79:04:
79:72:68:9d:55:64:84:8d:c1:7e:96:cd:4b:1a:d6:
9b:60:8e:1a:50:2c:b1:a3:ab:1c:ed:5f:32:3e:b8:
45:c3:ea:9e:9f:aa:0f:d5:2d:7f:53:3b:60:26:5c:
c7:a5:f3:85:49:56:eb:ef:b0:b1:65:98:d1:9d:c0:
0e:5f:56:40:39:05:4c:3d:fa:d0:b5:3c:e9:b2:8b:
4f:23:67:7a:bf:68:e0:17:33:0e:c6:42:be:18:7f:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.0.0/22
IPv6:
2a0d:b300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205073
Signature Algorithm: sha256WithRSAEncryption
44:9e:38:0f:e8:c8:e8:39:61:57:67:7b:92:3d:be:0d:51:0d:
0d:f0:b9:34:8e:d3:9e:54:65:ca:36:fd:ac:f5:93:21:be:b9:
d9:4f:ff:8f:f8:fb:7b:33:2e:86:00:85:cc:31:fb:00:32:93:
f8:b8:5d:ca:fa:20:59:fd:26:36:f2:d2:63:2f:32:1c:3e:6d:
40:87:31:71:f9:5f:b7:f9:00:7d:89:9e:93:62:cc:b3:79:f9:
f6:58:14:c3:fe:31:a5:4c:93:23:15:8e:bf:8b:cb:a2:51:a4:
d9:95:68:3f:c4:71:87:43:f0:bb:e1:05:71:61:2b:c0:91:6c:
d3:fb:b8:c6:78:42:47:4d:89:90:96:65:f8:97:05:93:3e:ec:
94:4b:ed:f5:aa:4a:1c:30:3c:a1:5c:26:1e:52:cc:8c:c7:78:
6f:88:f7:d6:f5:43:ce:cf:7d:90:bd:dc:f8:27:6c:b2:9b:8a:
6c:13:fa:c7:8e:94:6a:08:5c:6f:08:cc:bc:43:7c:b1:9d:62:
60:2c:8c:d3:5a:c9:75:c8:3e:fb:51:85:74:9f:13:17:1a:c0:
47:83:0b:da:74:d8:76:7b:5d:c0:6b:7a:50:ec:b2:19:a5:9f:
b3:e1:24:f6:d8:6f:16:5b:b8:ec:bd:2e:b9:ba:be:2e:c3:fb:
c6:f2:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:14:30 2024 by rpki-client on console-ams.rpki-client.org