Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.cer (raw, json)
Hash identifier: y5/j3TKjIJ1SwGWBvKMVky1WUa1h8NQ62l4BC+ycelQ=
Subject key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72728D9B68BAC79DD8FADF21B0E630C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208451
IP: 45.132.116.0/22
IP: 2a0e:6bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:28:d9:b6:8b:ac:79:dd:8f:ad:f2:1b:0e:63:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:73:ec:2e:18:95:d5:d3:c8:13:a8:98:66:
58:70:48:d4:3e:34:dc:d6:e5:b0:71:5d:d7:bf:65:
99:4e:27:9d:ab:12:15:84:0a:25:00:aa:83:e3:f2:
ae:77:df:63:7b:88:e1:f5:36:f7:a2:b0:bd:80:bf:
4d:e3:c7:38:63:b6:70:6e:ba:9d:fe:fe:ec:08:7a:
94:0e:c4:80:e4:bd:b7:08:b9:d8:7e:cd:fc:a5:78:
e8:11:ea:b0:4a:6e:36:18:5e:c0:d1:87:f8:28:ca:
22:75:2f:31:c4:e7:cd:c0:9b:58:5a:68:ee:9a:a1:
e8:18:75:74:89:5a:0b:7f:93:69:f0:11:58:6d:f8:
02:78:06:d6:f4:be:9a:c3:c1:7c:e4:c0:58:14:0f:
eb:1b:9e:36:05:16:dd:07:ba:8c:52:ca:b8:3e:30:
5e:e0:09:e9:1c:e8:cd:7d:12:f1:99:6a:db:4e:de:
ac:f9:d6:c5:5a:6f:a6:05:77:cc:88:ce:6d:11:26:
d2:60:67:49:5d:5d:09:17:6d:f5:8f:37:45:c6:4b:
da:30:4c:71:17:29:16:4a:a1:51:9b:75:b8:44:f2:
e5:88:81:08:3f:19:f6:59:36:0f:e7:9d:83:4c:52:
5f:0d:a1:08:76:4f:e0:0e:87:ed:25:d9:53:ae:3e:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.116.0/22
IPv6:
2a0e:6bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208451
Signature Algorithm: sha256WithRSAEncryption
29:77:8a:85:db:b3:63:8d:3d:5f:ae:8e:a6:bc:15:e4:01:03:
5c:fa:25:17:85:13:a8:79:a4:64:9a:c4:a8:7b:7c:18:a4:78:
88:b5:aa:75:02:2c:aa:7c:3f:28:53:8b:ff:34:60:44:15:ef:
4c:7d:e8:76:6b:8d:5b:d5:47:a8:d6:c8:95:6d:97:13:b3:36:
b2:e7:67:22:1e:a0:93:8f:29:69:78:38:b6:1e:19:ac:6a:66:
3b:59:21:a6:b6:01:a4:4f:ce:d7:25:d6:c0:02:79:23:5e:ba:
be:25:82:e6:fe:85:45:77:dd:fe:22:f6:39:69:4e:bd:23:6f:
c4:9b:1e:ba:4d:1a:bb:6b:22:42:17:e3:19:b1:80:78:e3:c9:
5c:4d:4a:a8:93:2a:cb:d0:67:b5:28:0a:1e:ca:84:9d:01:c2:
c2:72:15:f3:d7:6b:46:d4:5a:14:db:32:39:70:89:9c:4a:a3:
2d:61:3f:37:f4:7a:ad:8a:5d:cd:4b:7c:ad:fe:59:a5:f6:17:
86:76:af:de:1c:23:7f:f1:be:68:02:38:2d:cb:4e:a8:4d:12:
d6:c8:87:2b:c6:5c:a4:ba:cb:f4:a9:39:15:91:15:86:11:08:
e8:74:01:13:66:62:6d:1e:2e:88:07:ec:fa:3e:58:8d:c0:5d:
75:11:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:21:04 2024 by rpki-client on console-fra.rpki-client.org