Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
File: b4CWRAfF2qRAiKz-leZIi4APreU.cer (raw, json)
Hash identifier: 164IJxObXeCzBn6Q3Lk+xMjWAtSG9jrnHDFhRhN8faQ=
Subject key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D8E4A5E6B1CC21EFF27D8CD8D248E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209057
IP: 185.202.192.0/22
IP: 2a0e:6a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8e:4a:5e:6b:1c:c2:1e:ff:27:d8:cd:8d:24:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f80964407c5daa44088acfe95e6488b800fade5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:04:98:74:d2:81:23:6e:50:3b:fd:36:3a:
f2:65:7f:0c:e4:b0:45:9f:e7:77:ab:e9:84:8e:c5:
3d:e2:11:7f:5e:80:53:f9:24:a0:f4:03:79:d5:51:
85:60:bc:dd:12:6c:dd:fb:80:8a:49:8c:b0:4e:7e:
7f:96:55:34:e2:11:a1:87:e6:f7:04:a1:09:bc:6a:
70:ab:1e:4c:32:30:e0:cd:7d:13:f5:fa:45:95:43:
50:63:72:41:8f:a7:8f:ae:ad:33:e1:7d:61:52:16:
f5:be:cf:ee:c5:19:a0:f3:ab:e5:50:af:8e:f2:ab:
0f:a4:62:75:ca:5c:c0:f4:57:bb:7f:c8:2b:fb:14:
d5:62:c0:75:06:65:e6:65:11:86:e3:c8:cd:41:5a:
70:a7:a5:3c:d3:0a:da:7e:5e:f1:31:dc:28:d3:10:
86:c3:88:3c:e8:77:fc:a6:57:13:23:df:54:fb:ca:
b5:7f:06:9d:12:82:b1:d1:c5:61:1c:aa:bc:48:6d:
d0:57:53:81:6e:48:50:d4:1f:64:ea:5e:e8:5a:25:
52:2e:44:47:1a:ed:dd:ac:4d:e9:39:d1:26:83:35:
d4:87:94:11:77:9f:4f:40:c4:9a:b9:a8:74:d9:88:
a3:d2:10:c4:2c:df:50:22:e0:67:85:dc:42:c9:13:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.192.0/22
IPv6:
2a0e:6a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209057
Signature Algorithm: sha256WithRSAEncryption
3c:f5:52:63:3c:63:e8:fd:f1:14:26:c2:3b:98:03:23:cf:af:
ce:a7:91:c5:05:c2:7e:4b:bf:e3:02:0f:01:f0:db:e3:27:61:
29:57:70:f6:a7:ed:7d:a5:9c:80:49:09:be:5c:c5:fb:6f:56:
c1:b0:70:df:33:9a:a3:10:1a:c3:8b:d4:80:2e:6e:cb:1b:c1:
29:49:b6:83:5b:9f:48:32:60:8e:d2:f0:29:1e:1c:a9:42:16:
a1:47:86:64:0b:1a:7c:18:51:73:9a:64:87:fd:45:29:a6:93:
e0:79:33:1c:93:ed:59:72:d1:f1:1f:e7:33:db:15:17:fe:cd:
f1:b6:64:85:37:5f:df:b6:d4:57:3e:d3:19:37:ba:02:f9:a2:
e7:18:81:ce:c6:3d:55:b3:03:bf:fa:95:5d:ad:48:05:0e:b1:
6e:a2:2c:0c:91:ac:34:85:bf:eb:c0:f1:dd:95:cf:0d:69:7f:
c7:90:56:8d:7b:f1:6a:9b:9d:eb:cb:df:ac:eb:a6:b6:05:9b:
28:ea:c0:4d:d6:50:11:46:24:b6:38:fc:b4:c7:68:17:ba:18:
98:0d:e1:30:c9:87:b9:9e:87:65:2d:fa:23:84:12:f5:6d:46:
91:df:8b:8b:42:7b:4f:f7:0e:eb:d7:56:aa:9e:de:80:1c:4c:
98:f1:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:54:20 2024 by rpki-client on console-ams.rpki-client.org