Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.cer (raw, json)
Hash identifier: jpdb/93rLZwKBOw9pqyqv3Mh3pDfENi63Ew/SJQlj9U=
Subject key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5001C430725EEE241CB5C870EB890DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202839
IP: 185.136.92.0/22
IP: 2a07:1dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1c:43:07:25:ee:e2:41:cb:5c:87:0e:b8:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:c9:52:0a:6d:c3:a8:0f:2a:87:b9:e9:25:
12:82:f0:06:9d:57:b5:a0:03:80:04:d8:67:e1:5b:
54:25:98:e0:fd:32:af:63:fa:5b:73:90:19:87:8f:
14:61:8c:df:22:c3:4c:71:f0:d0:4b:40:c9:8a:c8:
af:85:08:e7:c8:1e:09:1d:b8:d7:a8:4e:87:b2:59:
9f:69:5d:ca:6a:f9:81:15:ac:67:97:fa:10:69:52:
fb:56:ab:8a:52:30:02:41:9a:a6:cc:78:15:5d:9a:
9e:a0:d0:e9:f5:15:0d:f1:b8:31:7e:39:38:99:f2:
3b:19:97:81:e4:77:a1:92:6e:07:5b:a4:e4:16:26:
79:e1:1c:67:a2:8b:80:c7:72:bc:9c:83:43:35:26:
82:b3:05:f6:b4:fe:51:a7:1c:ac:96:c0:93:f0:96:
6d:a8:3e:8b:72:ff:31:6f:f4:10:75:2a:ba:82:2d:
2a:8e:ce:a2:83:4f:bc:d2:21:32:e0:5f:64:75:47:
16:15:6a:e6:9a:52:33:58:c6:20:ff:3c:7c:7a:36:
e9:5f:d5:4e:ea:90:2a:17:9f:98:74:af:11:ae:c9:
9b:d2:65:99:d3:32:c8:2d:d6:0c:28:78:f3:35:a8:
3a:53:ec:5f:57:93:22:42:f1:ea:97:47:2c:ca:17:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.92.0/22
IPv6:
2a07:1dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202839
Signature Algorithm: sha256WithRSAEncryption
9c:61:67:6e:5a:13:1d:f6:48:96:c7:ae:77:59:dd:7d:b9:7d:
c2:dd:e3:68:9d:c1:ee:c7:ec:01:43:4d:bb:6f:6f:12:72:13:
08:67:d1:0f:62:a9:05:a8:8e:2a:f4:53:e6:4f:29:ed:81:1f:
a0:28:cf:33:a4:43:f1:42:0d:75:65:07:62:43:53:e8:bd:14:
b0:a2:9a:25:1b:61:b3:84:d9:ff:82:25:ff:90:38:ee:d7:3b:
d1:34:7b:ef:01:13:36:07:d0:71:06:cc:26:0e:4c:99:fd:36:
f1:7f:e2:fd:15:34:99:6a:69:fd:9b:4f:f9:88:d7:d7:79:90:
41:88:41:70:14:e4:0b:c1:3d:7b:33:03:80:6a:4c:98:f2:f1:
e2:bb:ca:77:94:31:10:2e:f5:e0:cf:a6:28:6a:24:ea:5f:02:
d9:02:e4:d3:29:17:6e:7f:92:64:6c:a3:d9:36:59:f6:5b:48:
07:49:ac:6c:c4:44:63:45:a9:61:4e:57:3a:9c:b7:20:9c:7c:
3a:31:37:78:bb:dc:07:90:c1:8e:11:64:a1:90:81:41:a5:26:
cf:a9:26:32:93:80:41:2a:ca:f0:c5:ec:73:31:ce:6e:27:51:
70:9e:7c:74:d1:2f:fe:00:92:d7:46:16:1f:8b:d3:f7:7d:f1:
6e:f0:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:32:44 2024 by rpki-client on console-fra.rpki-client.org