Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer (raw, json)
Hash identifier: GPXR6lObmymKokcgLOpk1s/QZJxCuXJVIrv9GAkuTnU=
Subject key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A8629B6349793CBC53949489B1910
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43789
IP: 91.200.56.0/22
IP: 194.150.73.0 -- 194.150.75.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:86:29:b6:34:97:93:cb:c5:39:49:48:9b:19:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:df:7d:6b:ab:99:8c:a2:8f:70:75:37:bc:
d9:07:02:40:dc:a7:02:73:3e:eb:a5:36:b8:27:3f:
88:42:9f:63:f5:1d:4d:e8:64:21:a1:0b:66:78:b9:
42:cb:0c:71:92:50:e6:ca:ba:51:51:0e:65:1d:9b:
ac:92:2d:92:94:eb:fe:05:7b:8d:c3:f4:00:f2:95:
46:a3:e0:a5:b7:2b:2c:3d:c9:fa:dc:d7:79:53:f2:
b2:88:27:e4:97:c7:30:3a:c5:31:53:0f:a3:a3:25:
b1:ee:bd:12:14:d8:84:20:bc:91:4c:6b:56:68:bc:
a6:19:5a:a9:bd:c5:d9:f2:b2:30:82:19:8b:95:39:
58:69:fa:9e:3a:59:f5:25:28:60:32:7b:16:cb:af:
18:4b:d1:89:58:83:5c:ec:22:4c:06:78:d6:d6:c9:
74:9f:a0:da:d0:64:62:92:21:73:b2:b4:d4:c2:ab:
e6:87:b9:75:13:8f:24:4e:e3:a4:84:22:d7:4a:00:
e5:6d:bb:91:8b:89:9c:4f:5d:6d:40:aa:6c:c5:d1:
89:62:0c:b8:9d:5a:4e:b1:d2:16:82:dc:6c:3c:77:
88:01:92:3e:04:85:d4:91:92:33:99:60:6e:87:9b:
9b:0c:d7:ed:04:3c:17:80:80:1f:b5:08:cb:f3:37:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.56.0/22
194.150.73.0-194.150.75.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43789
Signature Algorithm: sha256WithRSAEncryption
67:c5:f0:46:af:66:d0:90:82:44:9f:54:3a:70:ba:d7:28:22:
11:6b:0b:b7:a5:1c:f3:63:ad:b0:56:7b:46:71:60:62:17:e6:
fb:c7:67:74:b1:2c:49:fd:eb:48:9d:48:de:0f:c2:91:24:7a:
69:27:d7:1b:af:05:09:43:7a:cb:b7:69:49:65:a7:44:5f:fc:
f6:13:f6:5d:20:5c:58:cb:76:74:ed:6f:25:ed:29:05:69:e8:
1e:d3:03:0d:14:34:af:2e:e6:95:ea:5c:37:ab:47:9f:6b:eb:
f1:90:d4:ec:eb:a2:3d:b1:1a:55:ee:2d:f2:21:78:d3:27:80:
e1:26:f7:6f:17:99:d3:ee:d9:2a:68:27:e5:40:15:35:0c:f9:
40:0b:4b:26:e4:ae:f0:cf:1c:bf:3f:bb:a6:18:59:1b:01:23:
ac:95:c8:52:56:ae:89:47:fb:d1:8d:60:11:33:27:57:8b:89:
a9:4e:56:64:38:33:df:18:bc:0b:63:b1:6a:5a:60:f7:4f:33:
f2:d9:02:2c:36:dc:7a:66:bb:2e:a7:0e:af:3b:d4:e9:56:1b:
9a:f0:92:90:a9:16:11:ea:6f:0f:aa:f2:f0:bc:55:55:21:02:
3f:71:b0:d2:a4:e0:b8:13:6f:b6:f8:e5:92:5b:5e:16:23:98:
3d:a9:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:33:20 2024 by rpki-client on console-ams.rpki-client.org