Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
File: cpIiZWfact2GiDyt1fPeb_1bNXM.cer (raw, json)
Hash identifier: RDuXX0u4g2XK2FA5tYHjfz2U09WzAtTgS+00EuQj3qg=
Subject key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E092ED8DCC0B72198166011A9E34BC498
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Mar 2024 11:17:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215385
IP: 45.117.232.0/22
IP: 176.119.217.0/24
IP: 2a07:9340::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:2e:d8:dc:c0:b7:21:98:16:60:11:a9:e3:4b:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 11:17:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:b4:74:1b:54:1d:bd:a3:80:25:a3:9d:97:
b7:ce:56:2f:46:40:a3:e1:30:b2:51:6a:ed:22:5e:
7d:91:1f:f5:a8:c3:75:c3:ec:8c:ad:54:5e:c5:6c:
03:4f:5f:13:42:74:a1:c1:10:bb:c6:42:81:0f:ee:
fb:bc:8a:12:4d:c5:5f:59:ba:3c:40:fd:54:75:b9:
e6:e6:56:53:6f:06:cd:75:c8:5c:e9:91:5d:2c:3f:
0e:3a:60:68:5e:40:d5:6f:75:92:41:c5:6c:88:bb:
78:e7:fc:ca:0d:c9:cb:26:7f:4f:cd:cd:d7:76:d9:
3d:1d:79:54:45:23:4d:c3:6e:c8:db:9c:49:26:b7:
4a:68:3e:f4:e6:7f:70:3b:c7:61:10:fa:af:27:f0:
3a:a1:63:d9:bb:4f:28:1d:97:a5:f5:ab:59:29:5c:
33:8b:45:6c:3b:06:4d:eb:60:6c:66:e1:ec:d7:99:
2b:9e:c5:a3:08:a4:ec:b3:85:8f:e2:93:80:f7:38:
32:fa:cd:e1:10:1c:96:cf:f5:85:21:aa:e1:23:5c:
1c:3e:1a:12:fb:11:26:db:77:55:88:b3:a8:9c:49:
2a:27:18:e4:48:53:ed:0a:26:33:f9:66:bd:ab:d4:
1b:17:cf:0f:39:64:78:90:8a:dc:46:00:ad:a6:66:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.232.0/22
176.119.217.0/24
IPv6:
2a07:9340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215385
Signature Algorithm: sha256WithRSAEncryption
46:5e:6d:31:7a:ec:bb:ee:6d:4d:28:6b:f9:79:db:8d:27:3c:
8c:99:e6:b0:93:4e:88:7b:36:58:71:49:9c:79:28:2b:32:a1:
ed:db:5a:2a:e3:d1:08:12:3f:c6:36:ee:a1:00:5b:13:82:d1:
eb:77:bd:52:6e:51:b8:a2:8a:e0:c8:ef:2e:9b:c3:41:4b:31:
b7:cf:59:09:7b:10:6f:90:79:b6:a8:bd:ce:f9:04:67:9f:d0:
a9:6d:e5:a6:5c:18:f1:7d:a8:68:9a:b1:d4:14:12:f0:78:2c:
11:f8:b4:22:80:f9:33:cf:6a:51:88:f8:aa:a6:68:b1:97:ae:
4c:32:50:48:7a:a3:40:a2:bd:11:a5:fe:d1:09:db:5a:d8:02:
30:e3:8d:7c:c5:ae:a7:15:58:ae:31:c0:a5:4a:44:98:f9:67:
0e:6f:13:c2:ec:75:3d:3e:b7:f6:69:6b:2d:00:46:cd:46:4f:
ee:61:ac:0b:be:66:a0:18:06:f2:93:f5:78:3b:33:ed:af:f4:
ca:8c:05:d2:f3:e4:82:ee:46:92:22:5f:27:c8:a7:0f:ec:5b:
98:12:30:61:f3:b1:1d:e4:60:02:c7:80:cd:ca:4e:2e:45:ac:
03:e0:ef:13:6d:35:a5:4f:de:e0:ba:ad:b3:bf:22:8b:9f:d0:
1d:2a:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:37:14 2024 by rpki-client on console-fra.rpki-client.org