Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
File: fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer (raw, json)
Hash identifier: VYEamZI5YInF7QjmovBkQZK5Jc8ba0/flO8bilv9lL4=
Subject key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC725733F606B68070D6C71A1A3D97BC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42288
IP: 88.218.16.0/22
IP: 193.228.90.0/23
IP: 193.228.168.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:73:3f:60:6b:68:07:0d:6c:71:a1:a3:d9:7b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:b5:21:e8:46:52:6c:18:24:84:ad:02:cb:
93:75:89:37:70:2c:0c:49:8a:96:06:5b:60:91:40:
0d:31:b5:cf:04:3f:6e:97:08:64:fb:0b:fb:79:8f:
ef:78:1e:d3:ce:28:a5:9d:b4:57:6e:80:10:03:13:
81:22:8a:38:bc:50:c1:dd:18:6b:f1:51:b0:f9:88:
a6:42:c6:32:f8:47:35:5b:c6:3d:e5:fd:34:b5:d8:
fd:2a:40:16:7a:9c:62:7b:5d:04:27:fb:97:b6:b9:
20:bf:56:15:b5:96:62:e2:42:39:b0:b2:30:a6:29:
84:42:31:aa:8d:f1:59:49:25:c2:04:33:f9:58:55:
72:bb:14:a7:c8:4e:e4:10:87:25:77:48:9e:85:3e:
83:aa:d3:94:2f:8f:ab:d0:83:86:b6:ba:00:a4:56:
bb:b0:57:00:33:ea:62:e5:bf:51:7b:6d:36:1c:90:
3e:a4:94:f1:5b:69:50:61:2a:e2:f3:64:e6:d5:cc:
a5:72:14:f5:d2:b9:4a:4f:eb:d0:cf:96:dd:6a:98:
ab:3b:45:c3:1d:05:31:ac:88:ff:40:d0:10:66:6c:
da:d1:23:b0:14:17:0d:20:0f:8b:cc:15:60:cd:15:
7d:79:50:1c:6f:fe:43:a3:b9:b4:f9:72:30:cc:c0:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.16.0/22
193.228.90.0/23
193.228.168.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42288
Signature Algorithm: sha256WithRSAEncryption
1f:d5:4e:f5:6c:b9:30:19:5a:47:11:8c:fe:e8:2e:4a:01:84:
bb:49:f6:c0:f8:33:11:b8:5c:60:b8:0e:9b:ab:6b:86:32:eb:
2f:0e:cd:da:3f:50:35:91:ef:2f:e3:0b:78:a4:64:e8:cf:e4:
31:e3:a8:56:31:48:2c:94:cf:e4:a1:50:04:db:f2:57:1d:95:
f2:1f:97:e6:e4:a8:2a:94:d6:aa:65:13:2b:c5:c0:1e:23:9d:
ae:86:93:f1:6b:9f:a2:0e:87:1c:10:f4:05:5e:3b:87:87:44:
8b:8a:13:eb:ce:35:33:1b:b1:8f:91:10:1f:35:e0:2d:83:a0:
f9:fc:5e:00:46:06:10:dd:8d:04:f2:c4:48:e2:6e:00:98:2c:
32:02:10:02:33:fa:75:47:5f:c2:f3:49:ea:fb:08:47:c4:f7:
4f:c5:e9:40:dc:08:fc:ce:57:1e:3c:2a:ef:a0:de:38:e9:40:
f1:35:7f:da:e9:42:2f:d5:dd:59:0a:a4:00:33:83:04:90:cb:
12:a1:83:38:26:cb:19:3a:fe:8d:ed:cd:bc:42:7d:45:7c:c0:
46:0c:ed:aa:30:60:ab:05:8d:f6:a2:de:c8:ae:8e:6b:dd:e9:
a7:5f:1b:4f:22:80:94:9f:73:01:00:c0:37:ad:33:c8:0d:4f:
2f:02:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:35:24 2024 by rpki-client on console-ams.rpki-client.org