Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
File: cCHXUovnE6S6LLTbXljWTYgutVU.cer (raw, json)
Hash identifier: xRkZg2z99z//DgNbJuWIg/8V75kEy55j6ThiezLvC2I=
Subject key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190DA0176A0274874A35EBDCB96F5AD7287
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jul 2024 10:34:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212219
IP: 80.253.246.0/24
IP: 91.151.88.0/23
IP: 91.151.95.0/24
IP: 213.142.148.0/24
IP: 213.142.151.0/24
IP: 213.142.159.0/24
IP: 2a0f:bf00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:01:76:a0:27:48:74:a3:5e:bd:cb:96:f5:ad:72:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 22 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:8a:e4:19:68:de:31:20:97:3d:00:38:ea:
29:ce:86:51:61:f5:e3:d9:51:be:6c:f7:11:98:1f:
3e:95:5e:32:14:10:06:07:a2:8a:ff:7b:a7:92:47:
e0:e6:3a:7e:fc:1b:f5:df:51:9e:12:93:cf:80:b0:
03:0d:46:b6:62:19:ac:6e:b8:ad:37:14:8f:dc:93:
d6:ee:aa:dc:4a:10:84:90:c1:11:c1:18:d9:12:c8:
80:fd:b3:37:ed:53:11:d0:4b:b2:64:76:78:6d:e3:
75:e3:bb:32:bc:de:93:5c:3d:cc:7b:68:b4:55:45:
14:46:79:f3:91:04:41:3a:f6:1b:70:12:f9:60:57:
ff:31:98:d0:66:2e:28:1c:cc:80:18:eb:56:64:f3:
32:7e:91:c7:86:13:82:63:fd:a2:8b:7e:7d:26:ba:
c0:e5:57:f2:57:8c:98:73:7b:68:eb:fe:98:25:0f:
a9:9c:4f:33:ef:fd:2e:5b:6e:4e:e3:14:06:1b:5a:
49:81:80:33:0b:14:69:e3:3e:0d:03:a6:17:66:83:
df:1a:b2:19:62:4e:6b:49:69:e6:48:4a:8a:5c:2b:
39:9a:1a:b0:b2:01:b7:19:95:64:8f:d9:23:a1:f2:
51:a3:92:75:11:f4:91:6b:c2:70:73:70:59:d2:08:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.246.0/24
91.151.88.0/23
91.151.95.0/24
213.142.148.0/24
213.142.151.0/24
213.142.159.0/24
IPv6:
2a0f:bf00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212219
Signature Algorithm: sha256WithRSAEncryption
4b:28:7f:e4:4b:05:81:d5:07:99:52:6f:7b:0e:10:9e:90:86:
58:fa:fa:8c:f4:96:24:a6:fc:d2:79:5c:f9:a6:d5:80:ec:69:
4d:6d:2f:9b:3d:0f:a3:0f:74:05:af:68:e7:03:27:d8:76:fd:
50:72:44:67:53:fc:a5:40:ed:50:d2:4f:79:6b:d0:0a:f3:13:
43:7c:4d:d4:7b:6e:42:6a:68:91:05:df:d0:3e:9c:35:bc:68:
48:a2:e7:9a:71:fc:03:2f:1e:6b:80:4d:02:71:8c:4b:c6:cb:
3a:1a:31:a0:0c:66:aa:3b:a2:1e:ef:89:7d:56:d1:21:a7:15:
fd:88:fa:92:7d:4c:fa:10:9c:1e:50:3f:54:73:90:98:12:70:
1a:eb:a0:46:b7:dd:52:36:33:23:d8:8f:3d:19:59:27:59:76:
82:63:39:d0:6a:e2:4b:69:74:d4:c5:b8:46:ed:8d:c8:24:d2:
3c:48:a2:83:90:75:13:4e:89:24:d3:b8:76:80:b6:5b:71:48:
b5:c4:32:f9:cc:08:82:dc:55:b2:ae:74:35:b3:28:fb:82:57:
ca:5f:ea:7f:16:8a:54:e9:4c:9c:c0:36:fa:05:bb:d1:38:50:
44:86:8c:91:b2:d6:4f:60:3a:1d:b9:48:a6:66:cb:bf:6e:03:
e0:10:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:02 2024 by rpki-client on console-ams.rpki-client.org