Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer (raw, json)
Hash identifier: UQDNYEhDCKdgdAqSRpS6wKYZ8YKjAyfBNUEefvn7HHY=
Subject key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348C4BA8B9A8F2CFF850437682A5D4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 24579
IP: 193.110.89.0/24
IP: 193.111.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c4:ba:8b:9a:8f:2c:ff:85:04:37:68:2a:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:9d:81:e0:ff:a9:61:02:ee:92:fa:6f:15:
0d:c8:a3:44:b7:96:6c:7f:75:67:7b:11:58:2e:4a:
e9:a7:79:fa:33:59:b3:81:e4:57:b2:6f:3f:18:57:
79:84:7e:ba:5a:b8:6f:0e:db:56:24:0a:a2:b0:3f:
7f:17:ab:2f:44:c9:b8:53:11:5e:d7:05:5b:05:ad:
40:a4:ab:72:b0:93:d1:c4:1e:b4:6c:79:e9:1f:6d:
71:14:d0:f9:4a:9f:18:87:a9:23:de:5b:d5:c1:00:
ab:46:27:cc:c5:2a:69:94:9e:9e:d1:81:3e:62:f9:
09:82:c6:83:43:59:61:4c:8a:7a:44:bb:80:cf:61:
07:97:7a:12:1b:16:38:c1:20:b1:39:31:cb:ff:ea:
b5:cf:ca:f3:08:83:59:5d:32:21:b2:9d:0a:9c:64:
db:cc:ed:34:11:e2:7a:00:99:3c:00:d6:5c:ed:0e:
f0:ee:d2:1d:a9:a4:72:0d:19:b0:49:06:96:8c:8f:
19:6e:06:02:0a:ac:ff:7e:8f:45:9d:3e:50:8d:66:
26:bd:75:6b:5d:8d:b3:f3:a4:9b:c9:ea:eb:59:aa:
0e:04:67:09:7c:a2:e1:c5:39:43:32:5a:d9:f7:aa:
b5:36:c3:f2:02:e4:f9:43:71:3c:f6:2f:bb:f2:9e:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.89.0/24
193.111.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24579
Signature Algorithm: sha256WithRSAEncryption
0e:d7:57:41:45:31:1a:fe:fb:35:18:8a:1f:91:36:7e:8b:56:
94:87:fc:86:82:1b:d4:1d:a4:d8:95:02:fe:8d:72:99:95:43:
a4:aa:c3:18:b2:95:85:1f:fb:0d:b8:d6:f4:c2:46:6e:89:63:
d8:40:ef:1e:a3:1f:fd:8a:15:fc:76:24:db:bb:00:58:d4:e3:
cf:ab:c9:9c:b3:0b:0a:dd:ca:08:f1:9f:27:2b:b7:ae:c1:a5:
d7:2c:e8:ae:87:a4:ce:6c:19:a2:7f:dc:99:f4:ec:aa:8e:6d:
fe:c7:55:4d:05:a4:67:a6:56:85:c7:98:b5:9a:d4:8c:12:ef:
1f:db:d9:3f:b4:45:e3:5d:49:9f:bc:53:b2:c3:fd:62:d0:83:
c6:a6:18:bd:b9:3c:e3:c5:4a:99:93:06:88:40:2e:d7:f4:c8:
0f:fd:f1:22:8e:c8:93:4b:3f:ad:c9:40:1b:46:37:18:b9:c6:
89:1a:f0:6c:79:95:f7:2a:6f:e1:63:ea:a7:33:7c:16:45:1e:
0b:ea:57:e8:47:f4:77:1c:e0:d4:53:ee:bc:ac:39:ba:d1:7d:
39:a8:92:4d:6c:3c:7d:36:c2:6d:3d:d0:e7:6b:f1:17:59:28:
51:14:ac:0c:e7:f8:d8:72:08:66:04:ce:2b:34:d8:c9:f3:7c:
4d:eb:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:06 2024 by rpki-client on console-fra.rpki-client.org