Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.cer (raw, json)
Hash identifier: RcIBEPuzcKN2nSvDAeln6YxVZnhivS8xkP9DknuYh58=
Subject key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE4BAA0FB0AB6AAE28E5B89470E5A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60788
IP: 46.227.48.0/21
IP: 185.47.104.0/22
IP: 2a03:15c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:4b:aa:0f:b0:ab:6a:ae:28:e5:b8:94:70:e5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:3b:fa:ed:fd:bd:60:03:62:36:83:5c:2f:
6a:54:21:1c:0c:de:a9:5d:cc:81:80:c8:01:1a:b7:
cc:f6:7e:24:ab:d2:c6:e0:ca:1e:22:d5:e5:55:0c:
c6:59:84:5d:81:91:c9:23:3d:3e:a3:4a:e0:01:52:
e2:24:e3:94:66:11:3c:dc:c5:10:51:37:6e:02:17:
2a:2d:4c:fa:8d:5e:98:75:67:47:0c:bb:9c:f1:ae:
88:53:05:45:e8:e7:70:89:d7:7d:e4:7d:4e:e3:c8:
be:11:da:0c:4c:c9:69:e0:d3:34:6d:10:d0:57:f5:
93:c6:fe:f7:6b:5b:fc:6e:53:8d:52:6a:cf:d0:cd:
2d:fb:a6:a5:d4:a4:16:0b:cf:83:f9:38:dd:03:ca:
c8:27:00:2a:93:c7:e4:b2:ce:93:9e:83:27:f9:bf:
dd:40:a0:ee:ed:26:55:a5:01:2f:19:3e:4c:93:5d:
22:de:13:61:9a:13:1a:9f:66:49:7c:82:e8:8a:6c:
2c:16:f8:e0:fb:ee:88:24:7a:a0:84:fd:d4:16:f9:
53:ed:ed:c8:ed:c5:72:ff:81:c6:6e:6f:26:d1:01:
99:89:57:7d:ea:f7:d6:39:64:5f:6d:da:f0:4f:41:
fd:9b:42:01:09:44:01:ea:5e:54:0b:f5:33:97:08:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.48.0/21
185.47.104.0/22
IPv6:
2a03:15c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60788
Signature Algorithm: sha256WithRSAEncryption
9d:d4:c9:28:b4:c1:7a:00:bf:c4:67:f4:21:89:37:af:e6:09:
cb:17:29:aa:0d:6d:e6:4a:ba:6a:2e:42:bc:eb:ef:d7:21:a7:
20:0c:89:b5:2a:0b:40:f7:66:67:bd:35:5b:d7:a7:ed:73:f3:
98:98:ac:7d:5f:23:ad:0a:9f:c5:cb:ae:a0:2f:fe:50:6e:26:
ba:46:bb:bb:62:55:8b:c0:b7:20:4c:05:e3:22:8b:d5:ad:4e:
d2:66:e4:93:3d:43:f2:12:98:05:02:2e:4e:5c:fc:cd:1f:20:
56:f0:a3:1a:8f:57:cf:5d:dc:bf:92:4f:cd:48:98:e1:b3:ca:
ab:de:ff:f8:a2:34:ad:ac:60:37:fc:80:c5:33:ef:8d:4a:bb:
a4:cc:7a:28:8d:40:48:bc:b1:f1:fa:3e:96:cf:ff:d0:56:2a:
8c:f2:ed:40:fe:65:56:91:7e:b8:c2:78:9e:70:9d:06:6e:0f:
88:e1:6a:d7:6c:af:f4:90:0d:58:5c:68:0a:25:cb:96:8b:e1:
62:40:95:c5:da:11:bb:fb:66:cf:3d:ad:08:15:57:54:13:96:
a6:45:bc:3a:77:e1:75:7f:21:c7:af:31:75:83:cc:81:e9:38:
e8:fb:99:98:c4:e8:c4:6b:2f:06:26:c4:bd:85:53:f1:d4:ed:
98:d6:a7:c2
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzI3kuqD7Craq4o5biUcOWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWY0Yzc4NzNiN2ZlYTQ5ZmY2ZWI5MGQ1MDJjMWRiYzNhNWY4YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN47+u39vWADYjaDXC9qVCEcDN6p
XcyBgMgBGrfM9n4kq9LG4MoeItXlVQzGWYRdgZHJIz0+o0rgAVLiJOOUZhE83MUQ
UTduAhcqLUz6jV6YdWdHDLuc8a6IUwVF6Odwidd95H1O48i+EdoMTMlp4NM0bRDQ
V/WTxv73a1v8blONUmrP0M0t+6al1KQWC8+D+TjdA8rIJwAqk8fkss6TnoMn+b/d
QKDu7SZVpQEvGT5Mk10i3hNhmhMan2ZJfILoimwsFvjg++6IJHqghP3UFvlT7e3I
7cVy/4HGbm8m0QGZiVd96vfWOWRfbdrwT0H9m0IBCUQB6l5UC/UzlwgcTwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFIn0x4c7f+pJ/265DVAsHbw6X4wzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzQzYWZi
Ni0wZDIxLTRmZjYtOTg2My1iYzUxN2UxMjFkNTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNDNhZmI2
LTBkMjEtNGZmNi05ODYzLWJjNTE3ZTEyMWQ1NC8xL2lmVEhoenRfNmtuX2Jya05V
Q3dkdkRwZmpETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDLuMwAwQCuS9oMA0EAgACMAcDBQAqAxXAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtdDANBgkqhkiG9w0BAQsFAAOCAQEAndTJ
KLTBegC/xGf0IYk3r+YJyxcpqg1t5kq6ai5CvOvv1yGnIAyJtSoLQPdmZ701W9en
7XPzmJisfV8jrQqfxcuuoC/+UG4muka7u2JVi8C3IEwF4yKL1a1O0mbkkz1D8hKY
BQIuTlz8zR8gVvCjGo9Xz13cv5JPzUiY4bPKq97/+KI0raxgN/yAxTPvjUq7pMx6
KI1ASLyx8fo+ls//0FYqjPLtQP5lVpF+uMJ4nnCdBm4PiOFq12yv9JANWFxoCiXL
lovhYkCVxdoRu/tmzz2tCBVXVBOWpkW8OnfhdX8hx68xdYPMgek46PuZmMToxGsv
BibEvYVT8dTtmNanwg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:44:29 2024 by rpki-client on console-fra.rpki-client.org