Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
File: iNdZL0EZAMBnteeiGaNFq_26pA8.cer (raw, json)
Hash identifier: ixUAhpfCYw+cGXXOSnBHEAfYE+G/80L+EFbGE9VAxqA=
Subject key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726165C792300C85323BF1CB440D12F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210772
IP: 185.112.156.0/22
IP: 2a02:6080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:16:5c:79:23:00:c8:53:23:bf:1c:b4:40:d1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:65:5c:20:cd:5f:1d:b2:cb:91:df:e1:d6:
5c:1a:7d:1c:d4:b3:72:e2:9a:ca:b4:ee:69:dd:92:
05:dc:29:4f:37:4f:78:19:68:96:9e:e8:ce:a1:f2:
08:b7:04:a6:9a:94:bf:03:ed:9e:dc:a1:be:16:67:
94:c2:e2:c8:2a:1e:3f:29:50:9b:f2:30:82:53:d7:
af:42:89:cd:80:f3:97:e6:af:2f:fa:61:2e:bb:80:
ef:e6:95:31:0e:e7:58:b2:37:2a:f5:85:81:f6:e5:
6e:08:5c:f8:6d:9b:79:b8:03:e4:b3:95:d3:e8:37:
16:09:98:ad:21:32:34:65:2c:06:80:89:83:55:2d:
2c:50:86:73:11:7e:ee:a1:87:b6:25:dd:9d:e4:51:
88:81:91:88:45:76:f5:ba:99:7d:c7:8b:4e:a6:15:
3a:ba:d1:c1:09:d6:91:f2:fc:82:f3:12:1c:65:49:
86:b0:08:d6:f9:e6:c7:b2:a1:f5:36:0b:01:6c:32:
c2:f8:5c:a7:96:01:a2:df:a4:31:97:d5:67:24:12:
ee:47:06:f3:bf:06:af:ef:d3:93:24:82:61:b7:22:
62:6c:e6:48:40:01:ab:5f:b4:f5:37:86:a6:06:35:
6d:13:a5:5b:82:00:b4:3a:a2:0b:48:b0:ab:6e:d3:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.156.0/22
IPv6:
2a02:6080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210772
Signature Algorithm: sha256WithRSAEncryption
8b:14:a4:e8:eb:7b:37:f2:5a:99:b2:c1:22:13:68:80:70:81:
7e:5d:ad:84:fd:1a:7b:02:a9:87:e6:da:5d:5c:d9:72:15:34:
c6:09:94:d2:1a:87:51:86:c9:0b:85:dc:00:88:d5:e5:1d:a0:
5b:fc:c6:5e:1e:13:b1:f8:58:7a:ae:4f:1b:5a:51:23:a1:f7:
c2:d7:8b:6d:ea:9d:ea:29:39:82:96:4c:73:69:40:a6:d8:ca:
bf:00:a8:da:ef:14:56:03:09:8d:9e:2f:1f:cf:04:96:9c:ef:
23:3d:97:ed:86:b3:3b:3e:7d:51:97:40:fd:45:82:7f:bd:11:
4e:89:d7:89:69:1d:9c:86:a9:da:ac:59:a0:56:d3:39:cf:b6:
25:28:4e:77:39:17:6f:13:5a:d4:8e:a5:c7:18:9c:9e:1f:14:
ed:11:df:e2:72:43:82:9c:c3:be:e4:4c:64:0b:92:18:00:48:
2b:02:c4:0b:eb:5f:a0:a7:7d:43:ee:72:f6:d4:d2:21:5f:f2:
0b:43:c3:3b:5c:a5:67:f9:30:e2:5d:0d:67:5a:13:22:2b:6e:
47:97:a0:f4:0e:75:02:d0:0d:e4:04:b8:ce:b7:0a:d4:d1:99:
47:9f:5f:dc:be:75:8c:85:87:28:8a:1f:df:0c:e3:37:c6:c3:
04:91:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:04 2024 by rpki-client on console-fra.rpki-client.org