Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
File: gO9no9w9cYRemxVVz_WtMbtCOpQ.cer (raw, json)
Hash identifier: X3llSReZWr5d83eTDCXTQiCNG3n4sfaDMsBrciami+A=
Subject key identifier: 80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B694089A25F540EF300D938AFC1AE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206711
IP: 185.176.36.0/22
IP: 2a07:ee00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:94:08:9a:25:f5:40:ef:30:0d:93:8a:fc:1a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:29:a6:8f:18:9d:b7:07:78:d9:bb:63:2f:
2a:ae:64:82:4d:de:5e:cb:45:db:c4:9a:53:92:34:
d3:53:76:b6:f1:70:d7:1e:98:ec:5f:43:77:a5:41:
b7:ac:94:ba:35:ce:81:f0:34:ec:2a:9b:57:ac:e3:
ec:f5:c3:d3:42:98:5e:6c:56:f7:4a:74:fc:f9:16:
95:de:a1:13:f4:8d:51:21:1d:e8:2d:1b:bd:08:6e:
ff:41:b5:4b:61:02:47:16:5b:94:3e:09:bc:f7:3a:
8c:5a:9b:97:fb:33:8a:7e:4a:0d:b3:06:bc:47:30:
3e:83:b1:fc:d8:c3:b3:c6:52:1c:ba:a8:d7:0d:50:
3b:ab:97:b7:44:49:cd:c7:77:0b:d8:6c:90:38:77:
cc:2a:7d:ed:6c:73:1c:1d:f3:45:52:0e:e8:6a:a3:
b5:0d:ee:c9:a8:68:f1:78:88:d0:c0:ee:7b:22:05:
ec:0d:d4:68:39:7e:8f:46:6e:00:ad:72:24:39:2e:
71:ee:6e:b3:cb:07:30:94:24:85:92:c7:22:ef:55:
36:a1:d5:02:99:9a:74:be:1e:e0:9a:3b:3c:7a:9a:
be:2c:89:12:48:30:a5:56:6d:3b:4a:67:30:b6:38:
a3:73:31:70:8c:63:91:71:a7:a3:4b:20:4c:e2:3e:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.36.0/22
IPv6:
2a07:ee00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206711
Signature Algorithm: sha256WithRSAEncryption
90:7d:eb:16:09:42:c7:73:41:b4:3e:7b:ee:b4:67:62:26:84:
de:9b:c1:c2:5e:2a:48:66:0d:44:71:c0:04:94:70:e6:af:2f:
3b:15:0e:9e:a2:df:1c:32:f0:b8:de:98:57:3e:c3:8f:3c:5e:
d6:cf:ce:bc:9f:1e:39:a1:db:fa:b5:d2:49:91:a3:16:37:b7:
2b:df:7c:a4:3b:ec:9a:a1:2b:85:a2:65:36:82:70:2a:49:62:
64:93:01:22:d9:c7:53:a3:45:ee:3c:ea:26:50:c6:40:66:67:
91:17:78:a2:83:75:9e:44:be:1e:a1:3e:1e:5f:ba:fb:19:05:
32:86:4c:05:91:0b:3e:aa:88:ad:4f:96:17:6e:ed:dc:8f:2c:
51:d1:6f:10:b1:ed:ca:db:30:81:e9:29:43:32:ab:1e:72:7b:
91:e2:e8:23:c0:b7:b1:86:0d:23:95:ff:44:53:38:48:82:9f:
03:86:9b:94:b7:ec:46:69:ab:24:4c:62:13:9e:cf:54:4c:81:
6e:75:5c:d6:7a:22:eb:6d:34:51:34:c8:8f:8a:77:66:e9:80:
77:ff:13:cc:43:91:6b:0b:49:bd:18:8e:75:fb:08:bd:5b:fb:
c5:ee:fa:6e:aa:91:b6:1c:ea:f6:70:f0:ff:95:f0:53:0e:e8:
74:10:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:30 2024 by rpki-client on console-fra.rpki-client.org