Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
File: faSamu8hhOwLtu8P3pAcWyhBumQ.cer (raw, json)
Hash identifier: TLkJ8Btc8k8RFykCXRzA3QgRMYLYXNH0C7KRKk2flQ0=
Subject key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4255EA69AD3E5ABC2952FFD169355F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206771
IP: 185.171.116.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5e:a6:9a:d3:e5:ab:c2:95:2f:fd:16:93:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:01:7a:21:91:f2:59:8a:d6:3e:c7:da:92:
58:7b:e7:84:6e:6c:5a:ef:85:d9:9e:38:f7:ff:08:
78:0b:15:a2:92:25:1a:51:56:97:1d:15:d4:29:c6:
b3:f3:03:c2:7f:59:d8:8e:92:6c:c8:c7:fd:74:80:
5f:b1:3f:ac:27:2a:d5:57:77:ba:2c:e6:2e:7a:79:
ed:31:31:56:37:45:82:96:86:cd:5b:ca:9e:7f:69:
d6:fe:aa:e3:5c:69:56:22:fe:78:0d:c0:85:c6:2e:
b0:37:e5:50:8c:e3:84:86:7b:53:dc:81:0b:0b:29:
93:c5:ea:b7:ac:32:4d:72:a1:db:e1:51:4e:e0:08:
c1:73:c9:4f:4c:83:4b:e6:21:15:5f:07:75:ec:53:
f2:9b:f3:cd:1a:cc:72:f3:11:37:d2:51:3d:ea:10:
1e:50:ac:b9:cc:91:63:39:5c:ac:63:92:72:c8:01:
43:ec:63:58:57:a5:be:81:51:ee:88:27:f6:0f:16:
37:53:c5:5b:37:87:52:55:bc:03:7b:7f:8c:ca:9c:
86:c4:cd:d8:f7:16:87:72:b3:0b:63:2f:22:82:bb:
ad:99:d5:d3:bf:b6:f3:ad:f3:5a:f5:01:85:57:c8:
b7:97:09:97:e5:ac:85:1a:9b:90:35:a2:f8:6e:d3:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206771
Signature Algorithm: sha256WithRSAEncryption
1b:e7:9c:2d:75:43:3b:1c:f3:67:7f:e8:57:f5:42:64:e7:73:
f7:94:a5:3b:f2:4e:25:98:c0:d8:fd:e9:63:80:e2:91:fe:75:
36:4b:19:47:50:83:94:24:9b:dc:cf:2b:b6:ad:93:2c:ae:97:
94:e6:ec:5d:66:76:99:45:88:57:f1:b0:21:18:f3:ad:f0:da:
cd:10:40:83:6c:f0:d4:69:96:a0:c3:97:9c:98:ba:03:d9:30:
cf:96:fd:59:6c:9b:4b:ee:79:f4:28:50:87:b6:7e:66:e4:88:
bb:d2:9d:b8:dc:97:ad:20:f9:a0:38:a8:c8:4c:21:fc:23:91:
8c:2b:75:f2:e7:fa:87:4f:b9:39:fb:e9:00:01:1f:a0:f4:6c:
df:41:a9:1c:98:aa:5c:0a:0f:35:f7:e5:98:cf:49:f6:c4:73:
83:d0:7c:5c:bd:9e:e4:5c:59:f7:a5:8d:1f:5c:ae:8b:8f:c9:
d5:c1:f7:a9:ef:4c:5a:40:d4:a2:5d:17:ed:61:e2:03:8a:28:
1c:58:c3:42:7a:52:cf:f0:a2:88:9c:8e:d2:c3:81:91:ce:3a:
07:4c:81:5c:3c:48:b2:b5:44:ff:43:02:c5:fe:ce:90:af:d7:
a8:85:6c:1d:1e:1d:f7:a9:c6:3d:94:be:c0:69:71:19:9a:46:
ae:3a:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:30:37 2024 by rpki-client on console-ams.rpki-client.org