Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
File: dNYxjajSNXnE9zi26OVcxf8n5bE.cer (raw, json)
Hash identifier: YYL5OsHMbI+0hxJPgrOCTG+D9FmxIeNTjl9jdCFbBlk=
Subject key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801297C39B8C60FC45BDB11275B236B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50119
IP: 176.126.124.0/24
IP: 2a12:380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:29:7c:39:b8:c6:0f:c4:5b:db:11:27:5b:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:8c:56:06:a0:0d:1f:b1:2d:73:32:2f:4c:
7b:46:39:86:11:dc:a9:86:cc:13:c7:7b:4e:b0:54:
76:a9:c6:47:18:a3:29:1c:05:3b:40:0c:f1:0b:d9:
46:e1:5d:e4:46:b9:c0:75:33:d7:ef:62:fe:d8:c4:
2b:2d:9c:59:0c:03:4d:3c:5c:b9:8f:f6:42:65:9b:
27:2b:e8:33:b0:8b:3e:b2:19:3e:9c:66:82:c3:2c:
b6:43:af:9d:80:37:fc:9c:2a:c5:06:ed:7f:0d:a3:
69:60:39:29:49:b1:f1:17:95:ac:be:56:f1:45:99:
3b:67:70:4d:ca:ae:e8:4d:40:ab:bc:6d:e1:42:5c:
18:34:96:61:ec:ac:00:bf:d2:1b:69:83:e2:70:5f:
2b:6a:ce:e7:a0:41:5a:99:f1:7e:f8:df:e1:4f:32:
7f:82:c5:3c:33:20:1c:7b:a8:7a:66:cd:96:fa:56:
7f:1b:7e:20:72:03:cf:48:d0:08:fd:00:0e:20:94:
8b:f4:96:44:a1:8d:a7:79:26:0f:63:4f:3a:5e:19:
e4:fc:47:65:7f:94:1d:4c:73:19:87:0f:b2:69:6d:
1f:29:33:45:75:8b:f1:ce:8f:2a:62:d3:d5:91:83:
6f:41:fb:2d:23:1d:30:57:d9:d6:d6:47:f8:99:59:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.124.0/24
IPv6:
2a12:380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50119
Signature Algorithm: sha256WithRSAEncryption
5a:76:12:9d:b2:f7:9f:24:64:e5:0e:cd:3e:53:e1:49:32:4a:
5d:bf:1b:cf:13:19:ad:72:2e:19:f9:6b:88:ca:cc:82:4e:82:
ba:be:7a:4d:c2:43:c3:35:3e:ac:4d:b6:22:4c:69:52:3b:94:
6e:e8:2a:5e:37:6f:40:39:b6:7f:d2:c4:47:0b:29:62:5b:d6:
c4:35:dd:12:62:56:a1:af:c3:44:1e:b3:5f:02:e3:ab:fa:b1:
05:88:a4:a0:1c:b6:07:ed:53:0a:c4:df:04:c7:f8:6a:09:56:
b0:1b:58:b7:4d:f2:a4:55:78:4c:65:e8:94:32:14:4a:c3:fd:
f1:2e:5b:c7:e5:d2:29:be:08:d6:50:e7:b0:b4:19:3c:ad:88:
b1:cf:f6:19:7d:43:62:29:39:3e:28:4b:f4:88:20:4a:35:48:
1e:8b:16:9f:37:fd:61:7f:73:a8:bf:59:c4:d5:db:9b:92:8f:
6d:7a:ef:f2:84:af:07:64:0b:e8:20:f0:9e:d3:26:7e:dd:87:
22:a5:94:ed:48:14:42:52:b2:98:aa:97:c0:66:88:08:df:e4:
88:3f:5c:fb:17:16:c1:82:35:4e:0a:df:ed:c3:88:47:83:c1:
45:5c:ff:78:9c:76:0e:fd:cb:16:d5:55:2e:b0:05:2f:b3:35:
f2:18:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:24:00 2024 by rpki-client on console-ams.rpki-client.org