Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
File: csoaXP9S6-LyK2adzCyQJ86guBw.cer (raw, json)
Hash identifier: LzZzMAHFWcmekmy04zSqSy0QKbF3HCY1Ty41Bq7oykc=
Subject key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29971E7BCEA9EBC8D4EBF0AB50F142
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35120
IP: 45.8.8.0/22
IP: 2a0e:3600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:97:1e:7b:ce:a9:eb:c8:d4:eb:f0:ab:50:f1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:dd:39:c3:46:da:2b:11:9a:46:f0:dd:c3:
5d:a9:74:2a:8b:1c:6a:22:b5:f2:6b:89:d5:54:8b:
0c:14:63:98:5f:e2:71:97:a3:f4:b6:55:95:a5:91:
46:4b:37:8d:a4:ce:c4:f8:24:1d:12:ad:d4:4c:b5:
10:23:03:c6:2b:f2:54:c6:1f:cf:3a:0a:2c:b6:0b:
ef:f0:8d:a8:dc:50:67:ba:fd:e3:17:f4:2b:3d:5a:
19:c5:a7:19:3c:9e:37:7e:bb:be:39:34:8d:83:af:
38:56:43:ef:e1:02:6e:dd:2f:db:3f:dc:50:c3:00:
1e:74:06:68:bf:63:0f:0e:43:1b:54:5f:85:10:21:
7e:6d:db:17:78:28:47:a9:8e:b2:6f:f2:c3:3c:43:
2c:55:51:1d:02:fb:20:24:da:75:05:1c:ef:d9:98:
73:9e:9c:99:6d:06:93:16:b2:5b:d4:9f:7c:32:20:
d3:2e:f1:af:e1:79:c5:80:fc:2c:ba:10:52:7a:67:
16:03:17:63:df:d7:1a:c6:54:67:52:09:62:a9:46:
2e:0a:0d:37:42:e8:ae:dc:24:92:eb:c9:ca:d9:50:
da:d0:fe:72:f7:30:4f:c0:d1:f2:3d:35:a2:32:ba:
19:2a:60:47:c6:67:fd:e8:3a:31:9b:40:b5:0a:87:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.8.0/22
IPv6:
2a0e:3600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35120
Signature Algorithm: sha256WithRSAEncryption
4f:d7:7a:3f:fd:bb:76:f1:94:cb:00:d9:c8:76:06:10:a6:a6:
6d:c2:fb:ea:48:07:2a:43:89:b6:ba:24:95:d5:67:4c:42:aa:
61:bd:e8:6e:1a:ab:da:f7:7f:aa:ba:81:11:b7:0e:86:7e:21:
42:96:f4:7b:c7:ee:92:49:7e:4d:05:c3:04:66:df:55:b4:ec:
b2:51:ca:b8:cb:c0:0b:60:51:ac:e9:d8:d0:ed:6b:c6:dc:e2:
91:3f:b1:3a:06:3f:00:8b:f5:6d:28:57:c1:57:5d:3f:70:8c:
b8:36:ea:e4:24:6f:d0:e1:e1:75:29:14:77:c7:db:a0:e1:61:
7e:8f:0f:97:f8:6f:a9:7b:09:17:26:25:1d:c1:8a:2f:35:69:
4f:b8:ff:4c:b9:35:46:0d:d7:9b:8f:0e:de:79:f8:e1:e0:ae:
00:f7:e9:58:bf:f7:a5:e9:14:25:d5:19:10:71:52:78:77:93:
62:1a:df:28:25:8c:5d:00:d9:21:41:b8:14:6f:40:d5:37:77:
51:bd:89:0e:f7:bf:bf:89:60:0b:b2:69:4b:94:7a:09:38:02:
d9:13:e8:a5:4d:47:7f:38:d3:fb:47:62:d7:8d:9f:0a:5a:6d:
e8:a9:24:4b:a8:e0:2c:3c:9b:0b:a3:a6:15:73:5b:bb:51:29:
dd:16:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:59:55 2024 by rpki-client on console-ams.rpki-client.org