Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
File: i42FmAZNtajts6YIQGTNKhrYxuM.cer (raw, json)
Hash identifier: cIFtbdGQ0VmT0BovSWySlGVUW/TixuOXUQs8D2MN9jk=
Subject key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEE6D7C9141B4D0A5F2C014A2D51A1AE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 13:33:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51801
IP: 95.141.248.0/24
IP: 2a13:4880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:6d:7c:91:41:b4:d0:a5:f2:c0:14:a2:d5:1a:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 13:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:14:1b:1e:c4:ce:d0:fa:29:6c:04:1d:bb:
c2:cb:6d:94:71:c4:c2:77:e3:5f:c2:89:62:13:92:
e2:d5:ee:02:4b:7a:41:27:58:85:4c:18:67:fa:22:
ae:76:21:c8:8e:f5:42:51:02:54:7b:b1:c7:a1:bf:
95:94:22:bd:04:4e:46:9a:18:82:9f:36:85:f7:8a:
bf:71:27:28:0a:80:16:d1:9a:06:2e:2f:41:91:26:
2e:8f:c2:1c:78:54:ed:36:3a:73:ff:89:25:7a:c9:
9d:d7:6a:3f:4d:9c:06:fd:bb:98:90:d7:9d:fa:fb:
04:33:ed:b3:82:8b:60:12:ef:d9:55:37:58:ad:c7:
8d:fd:23:9f:da:82:95:e5:00:1d:30:b5:0c:ef:4d:
30:73:ee:0c:cb:0b:72:c3:49:08:86:13:bf:dd:34:
16:ef:63:dd:e7:cb:92:92:e2:fe:57:c0:c0:79:60:
fa:15:c8:87:22:f1:1c:42:2a:ed:8b:04:fe:dc:fb:
18:1a:e5:79:8e:22:7f:dc:a8:b3:2e:4b:d7:7b:04:
11:86:3c:c1:21:92:93:91:d1:a9:d2:a5:8f:34:c3:
50:a0:ea:5b:97:d8:fc:60:97:ab:d6:14:cd:8e:f7:
7e:93:03:72:8c:3d:bc:14:22:ba:b7:27:ce:a5:75:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.248.0/24
IPv6:
2a13:4880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51801
Signature Algorithm: sha256WithRSAEncryption
52:da:a7:51:42:5c:e5:ec:de:e2:7f:19:98:93:8a:d6:35:dd:
08:ba:18:df:75:2c:d0:4b:77:cd:52:42:bf:bb:08:c9:04:f9:
98:c2:ea:65:c2:6f:5d:9c:f1:bb:7f:a1:ff:55:d6:18:7d:95:
fc:b8:fe:ea:47:9a:c8:59:be:82:70:d4:e9:f2:f4:d9:ef:f3:
cb:2c:a3:55:3d:a3:4f:19:2a:eb:ea:59:ce:34:5b:27:94:18:
86:84:fa:80:48:c3:24:f7:1a:5d:5f:19:c8:61:d1:01:9b:e1:
50:fa:9b:96:3c:91:87:52:65:b5:7e:4d:73:29:b6:fc:72:ec:
65:fc:04:ed:cf:72:d0:a2:c0:a2:27:73:54:3c:fe:de:d8:32:
27:8b:e0:05:90:10:7e:13:78:f8:f1:19:73:ed:94:ac:b7:c4:
96:fa:e5:50:79:23:1d:21:b1:d0:fd:48:7a:f5:40:9c:4b:1a:
fb:38:51:05:43:9c:89:a5:65:cd:ba:6a:2b:a5:9b:ac:12:a8:
ba:7c:9a:6c:e7:9d:a1:61:05:a3:a8:81:4e:3e:21:70:d6:c0:
90:d4:82:6d:79:e9:19:aa:74:f3:69:a6:c5:c4:11:3c:e4:f8:
ae:43:da:e8:a1:36:3b:81:79:90:eb:e4:0c:4a:79:ad:bb:ff:
32:92:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:28:45 2024 by rpki-client on console-ams.rpki-client.org