Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
File: gEH-6hI_ywfocqjLS92at7jaL88.cer (raw, json)
Hash identifier: /Owp2+BO++CZAMUlO2somxLU4/EXVMOP9bnCWd3afDU=
Subject key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DADE3E5920632885F2813F7915A71C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200258
IP: 2001:67c:b50::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:de:3e:59:20:63:28:85:f2:81:3f:79:15:a7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:27:5c:a5:b5:6a:fd:a5:10:5b:86:2c:94:
33:3e:53:7d:5b:0e:38:3c:ef:3e:15:07:ee:6f:29:
01:7b:04:fd:86:82:e0:d6:5a:04:b7:5a:52:8d:18:
9e:48:c8:80:d8:49:96:80:a7:f7:7a:86:97:41:be:
0f:35:44:26:84:a8:3f:6e:03:6f:3e:e3:b4:05:e7:
80:fe:0b:91:29:b4:dd:62:3e:15:58:e3:c9:c5:b3:
95:9a:70:11:25:23:ef:23:c3:38:e8:3c:4a:25:4f:
dd:53:da:2a:d6:a2:f6:e6:84:6c:44:9c:fc:fe:99:
98:0e:7f:85:5a:08:5a:38:a4:91:7a:75:13:d8:5b:
aa:10:65:be:99:6b:19:2d:32:f1:64:47:94:7e:6e:
d7:e9:c3:85:d6:19:72:eb:c9:3d:3a:cd:a7:0d:e1:
95:07:a9:9c:b7:30:9d:f0:52:57:4b:cc:7f:f0:6e:
2a:4b:5b:a8:79:22:a8:e7:87:24:b6:cd:54:8f:70:
be:ef:95:51:5a:44:d9:a2:7b:45:7d:c8:61:8d:31:
39:b2:67:7a:b1:f6:c5:f2:c8:d4:69:61:41:a7:e8:
d5:3a:66:73:f8:b8:a7:ed:65:4d:a5:50:40:41:bb:
38:ad:a1:e8:c6:5b:a5:42:c0:eb:2f:02:04:61:fe:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b50::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200258
Signature Algorithm: sha256WithRSAEncryption
92:15:12:ca:72:cf:17:f1:f9:85:64:51:8d:a3:cf:43:d8:9d:
45:8e:b8:fc:f0:9e:14:d1:c1:9b:c4:52:d7:57:90:1b:95:ff:
ce:ca:bc:b6:2b:be:23:f5:71:6c:9c:22:21:cd:e4:2f:73:50:
7d:5f:42:e8:6f:96:a9:da:7a:4d:f8:bd:05:a5:0f:d9:aa:8a:
c8:c6:2b:a9:2b:22:26:49:86:4f:2d:43:bd:86:07:7b:da:1f:
08:02:fa:38:f7:e1:4f:f1:97:15:31:8f:70:ee:75:41:78:81:
27:b0:95:7e:25:b4:c8:a2:99:b8:65:f0:ca:15:77:cb:2a:d9:
11:ba:50:bd:5d:02:64:39:31:8a:9e:33:7a:52:49:88:f5:00:
ce:f9:aa:0f:d2:15:53:75:6c:28:54:3e:5f:1d:6b:35:05:fb:
e4:71:a2:2b:39:54:d7:dd:25:b3:95:f8:66:3a:e3:d7:39:0e:
4b:22:02:e5:b1:8b:de:6a:88:5d:2d:3f:06:e1:d6:27:47:00:
8f:20:04:57:de:4d:5b:ff:60:d7:10:92:9f:32:a6:97:6e:9d:
fa:c5:a1:97:c3:fa:0a:05:e3:aa:38:7a:e3:26:8c:98:5d:13:
84:9d:61:92:05:b3:8c:d2:10:c3:50:5e:8c:d4:e3:4c:7f:64:
05:43:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:51:13 2024 by rpki-client on console-fra.rpki-client.org