Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer (raw, json)
Hash identifier: Zh70e3C0jIG0KZLCJN+TqoCkoSrvRAwtRqw/oFuAlXc=
Subject key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801BD312AF8DEAD1E68B18BDA0A5EFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208672
IP: 45.90.136.0/22
IP: 2a0d:4080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:bd:31:2a:f8:de:ad:1e:68:b1:8b:da:0a:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:48:02:58:ba:bf:74:6b:e6:82:1b:7d:9b:
7b:1f:9d:2a:2d:7b:39:83:6f:2f:18:f4:f8:d2:44:
bb:c0:71:0b:c0:de:95:32:bc:90:5e:84:5a:e5:9c:
8d:b1:65:9e:28:4d:53:8a:e2:42:db:df:47:05:76:
ca:4b:5c:9a:82:ab:98:ea:da:f0:c1:01:d1:46:04:
fa:d2:51:55:83:78:32:d6:02:af:50:52:88:9f:8e:
e1:3b:b1:92:32:34:42:c0:c3:ee:fe:6a:74:0a:ab:
32:47:a5:1d:03:ef:c3:f4:c6:7c:26:87:e9:61:f4:
e4:98:1c:25:04:70:8b:82:0b:28:5c:18:d5:b8:3c:
85:ce:66:cd:1c:0f:10:bc:45:e7:bf:6d:06:ca:a3:
1a:f1:d4:a4:89:1d:b9:7e:d7:12:9e:38:9c:e1:62:
d1:74:92:1f:cc:ba:d4:e4:eb:07:c6:ac:4f:14:b0:
ce:11:f5:ae:c2:f0:1c:b4:85:cd:2a:44:43:8a:fd:
d4:8a:24:8c:cb:6d:93:8d:6e:45:6e:68:1b:64:f1:
91:bd:75:99:61:f7:2e:61:bb:dc:91:0d:4b:c4:11:
8b:df:4e:b5:19:bb:7d:83:88:df:21:f3:3e:d9:21:
d0:d1:9b:63:d3:76:d1:21:32:84:ad:7c:7c:55:41:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.136.0/22
IPv6:
2a0d:4080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208672
Signature Algorithm: sha256WithRSAEncryption
73:94:f0:0e:c2:3a:7c:4e:fe:2c:dd:02:3d:20:45:e6:0a:90:
41:25:b4:ac:e3:f3:1d:c6:67:92:91:38:23:bb:26:c0:c9:5b:
3d:27:51:4d:8d:34:fb:01:65:30:0f:67:64:0b:f2:3d:97:22:
48:f2:fa:1d:62:f0:93:9d:1f:14:81:a3:1a:96:ea:d3:b9:5a:
7b:e6:f4:8d:13:b2:1f:44:ba:ba:61:f9:d6:26:48:10:97:5d:
17:41:b8:fc:78:88:d1:dd:3d:24:5a:b8:68:e2:8c:96:d4:fb:
38:6f:64:56:2d:64:3a:ce:08:ce:45:d0:67:3c:c7:c1:0a:5f:
40:2e:bc:7b:d1:88:56:22:dd:3c:01:14:7b:74:a4:eb:c5:c0:
a4:88:63:a6:4c:35:c7:9b:23:7c:65:82:98:39:70:a6:8f:f4:
4f:fe:27:b3:1e:9f:9c:63:91:1c:56:eb:bc:d8:64:d6:71:c0:
f8:ff:cd:62:da:a1:23:0e:20:c2:75:23:35:22:d9:65:42:b7:
75:3e:48:69:e1:25:03:9f:44:9c:8e:af:ed:f2:56:d8:96:a3:
27:89:b6:f9:24:dd:40:43:ff:09:9b:32:ab:9d:14:80:f7:b0:
38:fa:a8:5b:4f:a4:44:2c:66:f8:ec:64:53:26:ce:af:1c:66:
eb:f7:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:49:39 2024 by rpki-client on console-ams.rpki-client.org