Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.cer (raw, json)
Hash identifier: NySXCPPupVYUSggaA89M/fimEqRRD2+x7N7+PWsyR+g=
Subject key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7276E9207BDB7347C2A098A98C8CDEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211470
IP: 185.216.15.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6e:92:07:bd:b7:34:7c:2a:09:8a:98:c8:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=744327750414d349dade02233497cf47655cd3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:98:c5:6f:5f:02:da:51:1b:0f:57:8d:73:
a1:bc:64:c1:0c:50:6a:94:a7:39:d7:e3:05:26:22:
74:42:11:78:8a:ca:42:fb:9d:3f:7c:36:26:c7:02:
d6:90:58:a3:07:54:95:20:6c:1e:a7:72:82:68:b1:
19:83:ec:5c:92:13:ed:45:6d:f7:e4:ef:23:a2:28:
ed:84:5a:c4:b6:56:ed:19:ab:8f:60:df:fd:bd:1b:
fe:01:55:fa:2b:70:b0:b8:88:2b:1a:e9:c9:5c:cd:
9c:5c:7e:38:9d:8a:e2:d8:71:66:8c:61:e1:34:11:
f6:19:5f:93:42:64:0c:ad:b0:0e:6c:98:cb:36:2d:
9f:c4:17:3f:38:de:84:2d:c5:87:75:5b:ad:87:2a:
3b:34:62:6b:52:68:ff:57:8b:b7:4b:21:d3:3b:04:
24:61:eb:9d:ca:ce:14:00:3f:e0:23:9f:d1:11:da:
3a:ac:92:1d:82:bd:fc:1f:c6:bf:13:e0:ab:8f:0b:
4c:49:d2:35:88:25:e6:4d:17:dd:f5:e5:b7:a1:e4:
79:cd:ea:e3:0d:34:c3:e3:45:2b:de:a5:3a:ed:da:
02:67:fe:30:b2:8c:52:80:de:4f:62:eb:32:b0:8a:
61:47:8c:13:4b:6f:2f:c7:6e:bc:e4:09:61:83:22:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.15.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211470
Signature Algorithm: sha256WithRSAEncryption
91:6f:4a:44:e6:1a:15:5f:5c:68:15:cd:3d:70:a3:b2:dd:3b:
9a:4b:1d:de:24:5b:94:1a:c8:36:da:53:ba:87:46:a1:e6:c7:
d2:65:b5:b3:f3:0f:16:81:90:06:97:dd:3f:d0:3d:a7:44:a6:
db:8b:3a:ed:12:11:70:b5:e3:a5:f6:e0:45:16:5d:e4:23:ec:
c2:7e:1e:56:91:db:28:ef:ea:69:7d:c8:7d:0c:a4:8b:98:ab:
48:89:08:7b:19:f0:d3:45:79:0f:cc:96:4f:25:f7:26:3c:9d:
a7:cf:42:e6:fb:47:f8:15:e9:4e:dc:4b:c2:48:8d:84:41:a6:
ec:a6:d4:4c:a7:af:04:bb:61:ec:4f:93:6e:40:90:87:2a:22:
2d:5e:43:c8:ad:45:7e:2a:f8:e3:85:f3:cc:29:4c:a3:c3:cb:
b1:37:63:18:37:b6:e5:b8:a2:62:60:75:42:b2:8a:e0:db:47:
61:3f:80:d0:0c:4c:08:32:ed:8a:77:52:4a:ee:f0:fc:3e:e1:
d1:28:c2:f8:71:47:2e:93:20:03:b7:39:a7:71:5c:69:03:2b:
df:b2:53:49:58:6c:de:f0:0a:ce:5c:73:02:d2:10:c3:9e:e4:
b7:47:d1:ed:e8:dc:1b:57:db:40:fa:b9:d0:f2:4a:99:45:7c:
7a:15:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:42:00 2024 by rpki-client on console-fra.rpki-client.org