Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
File: gcEVEu7o_tkcQi8ztljWi8NOt4A.cer (raw, json)
Hash identifier: iA6g/C0Ig+D2KRzNO8bZtrPMZ4uJVLUVnB8EbfB4ON0=
Subject key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42530726F298D297F5215B8085FC179
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50625
IP: 94.232.216.0/21
IP: 178.212.160.0/21
IP: 192.162.172.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:30:72:6f:29:8d:29:7f:52:15:b8:08:5f:c1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c11512eee8fed91c422f33b658d68bc34eb780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:0e:f9:6f:9c:7a:84:ca:2b:b9:d7:44:aa:
3e:1a:21:36:fd:b6:6e:59:42:79:2a:d4:72:b6:81:
f7:2b:03:e6:5e:72:58:9e:a2:b0:96:13:84:39:51:
89:5d:f8:37:b6:d0:c8:39:0d:c7:a6:dc:a9:30:1b:
68:16:de:85:03:cc:73:2a:a1:d6:b0:50:0c:c6:74:
c2:a6:a5:1c:61:da:84:cc:da:a5:53:1b:07:7e:a7:
b3:9b:ce:37:7a:84:1d:2c:ef:88:27:35:89:3f:06:
db:1c:1d:9a:40:38:ca:9f:3d:97:f6:b1:ca:16:96:
cb:ee:97:a4:62:cc:8c:68:4a:b6:87:e7:f8:ed:c0:
d6:e0:a0:72:15:da:24:9a:6f:91:22:e7:a3:25:87:
22:75:1e:dd:8a:db:09:f2:9d:53:45:5e:78:1b:d4:
c9:6b:70:75:f9:85:26:5d:3d:f8:18:85:b3:b5:2c:
7d:cf:88:8e:e3:a0:cc:99:62:8d:49:2b:0a:8b:90:
53:fd:c1:43:eb:fd:a7:21:fe:af:df:ce:5d:8d:a0:
40:b3:ff:a0:23:cd:fc:7b:6a:43:51:a7:41:35:75:
7f:77:ee:a3:e1:d1:74:bc:61:42:bf:67:98:c1:3c:
87:5f:b8:62:13:8f:0d:b3:b9:b6:44:e6:bb:9a:59:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.216.0/21
178.212.160.0/21
192.162.172.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50625
Signature Algorithm: sha256WithRSAEncryption
77:bd:75:04:7c:26:fd:e0:27:ab:83:63:00:81:fa:02:1c:12:
10:30:93:3d:41:ea:74:60:2f:d8:03:6f:a7:c4:e9:07:97:e0:
53:a1:b8:90:fd:25:57:5f:dd:6b:0c:62:08:7d:ff:aa:d2:c4:
53:6e:1b:60:f5:e7:ea:76:9a:1c:bc:ea:d4:d2:d9:2f:4c:c5:
70:27:dd:5d:f3:9c:68:29:29:c9:cb:df:9a:d9:ef:2f:f6:c8:
d6:c3:2e:6c:8c:4a:ab:8a:5b:07:53:88:1e:49:a4:53:54:ee:
d2:a3:9f:c7:dd:f2:7f:72:72:a2:db:b0:64:86:93:94:fe:f1:
3a:c1:d6:a0:aa:62:01:62:81:65:38:7f:f8:2a:f8:96:bb:d6:
f4:ea:50:9d:4c:9f:c2:9c:3e:34:63:43:ad:56:0c:8e:2c:e1:
77:fa:98:d1:cd:aa:d6:f1:d2:f1:fb:1e:60:e8:21:e8:22:c4:
a2:d4:43:e8:21:58:41:42:08:a4:13:76:53:92:9d:ff:87:e4:
29:b0:17:04:d2:ba:fa:cc:25:72:a4:60:31:93:af:07:b6:a8:
1c:a6:f1:92:fd:28:7f:2d:37:7d:ec:77:ef:de:57:63:f4:e2:
c0:d1:ac:5b:ab:62:63:dd:1d:6f:ef:2f:a9:b0:3f:13:91:58:
b8:06:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:51:33 2024 by rpki-client on console-fra.rpki-client.org