Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
File: czQP17PChWN63ADx5h4rjkAmWPM.cer (raw, json)
Hash identifier: OebWr24W7dQhZPbFgu/b4Kx43ZBQ4GhisZrdxZJPTr4=
Subject key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9B87FD722D405D7B60D1E6ADDB25D14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51299
IP: 185.158.144.0/22
IP: 194.61.87.0/24
IP: 2a07:ae00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:7f:d7:22:d4:05:d7:b6:0d:1e:6a:dd:b2:5d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:0c:b2:69:ba:ee:ee:8f:c9:fd:9f:9f:d0:
c1:c1:16:dc:a8:67:c0:d4:e6:74:aa:03:a7:4e:e2:
08:b8:15:d7:60:24:16:39:3e:ab:c9:06:c3:47:96:
95:76:23:86:8c:46:76:26:dc:c9:ab:d1:b7:c1:bb:
1e:ba:88:92:b9:bf:e1:0a:ec:cf:5a:dd:d6:cb:7e:
8e:e1:d9:6c:31:6e:80:05:5d:41:d9:ea:f1:b6:bb:
99:8c:59:c0:db:24:5d:fb:8a:d8:af:5a:38:65:f0:
3c:d7:f6:5f:b0:f7:d4:b1:ee:dc:5d:7d:18:d1:54:
1e:44:28:4c:b4:45:02:db:06:05:d7:26:f5:b9:f9:
56:f5:ec:f6:46:37:50:ee:39:37:a2:19:a9:f3:e5:
20:ff:88:90:fd:70:62:7b:c1:4b:3f:65:40:75:fd:
c0:db:eb:13:18:2d:c6:0b:29:48:e9:fc:ce:61:03:
c0:d7:9a:e6:9b:0e:b4:45:9b:31:f8:a7:25:ab:c6:
c9:65:bf:ae:0e:a8:76:fc:ce:7f:bd:2e:a7:9f:12:
44:38:6f:6b:10:f8:a2:65:b7:cd:d3:b0:cb:a0:70:
80:6a:61:4c:c3:ec:d8:ab:af:c8:c7:08:72:52:53:
ec:8d:d9:06:66:2e:72:15:57:19:1d:01:ad:25:8e:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.144.0/22
194.61.87.0/24
IPv6:
2a07:ae00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51299
Signature Algorithm: sha256WithRSAEncryption
87:62:fe:15:0a:7b:69:22:1d:e6:1b:2d:90:0d:04:bd:38:8f:
12:8f:cf:72:b2:1f:98:37:84:ad:f8:3c:f1:07:31:cc:8a:71:
84:2e:a2:70:ce:ca:83:40:b7:e1:95:c4:dd:78:42:d6:98:d6:
fd:a3:2e:3c:e0:41:49:23:0b:53:0a:27:2b:5f:8b:bb:ce:14:
01:a3:9e:0c:b5:f6:8a:ed:3f:5c:ed:ab:2d:fd:97:4e:cb:63:
fa:24:cc:c0:e9:3c:07:2a:d2:65:2e:7f:00:a3:82:13:e7:ba:
0c:cd:cb:53:f1:1a:f8:9e:77:17:c7:c5:6e:09:67:a7:e9:69:
5c:0f:fb:e3:77:ce:39:b2:b0:3f:30:5a:68:0d:03:6d:37:2c:
49:fa:95:ff:c0:32:4d:ec:b2:3b:56:88:ef:98:c6:5d:9d:e1:
bf:e1:4f:13:71:ac:1f:62:41:35:f5:f3:23:3d:f5:00:1b:6c:
58:8a:b5:ff:33:c8:a3:51:35:4b:c1:37:02:16:cf:04:af:34:
6c:33:e0:eb:91:1b:7a:1d:2d:59:8c:5f:1b:cd:d6:e7:13:b0:
19:3a:ec:1d:f8:dc:06:dd:61:f4:fe:c2:87:ff:82:0f:07:23:
38:f4:74:cf:eb:da:1e:8f:4e:40:e5:75:18:c0:e9:74:b0:5e:
76:a8:fc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:59:59 2024 by rpki-client on console-ams.rpki-client.org