Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.cer (raw, json)
Hash identifier: HquWJuSheoUoAnB1HGZLzmPhcFIjwNYnV18ulJFtuCQ=
Subject key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D33C20E6C06B1DD779B75DEE2B90C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199162
IP: 194.180.6.0/23
IP: 2a13:da80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:33:c2:0e:6c:06:b1:dd:77:9b:75:de:e2:b9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:d7:16:70:27:72:f0:8b:68:40:ee:81:e1:
bb:62:c6:b4:84:ea:a9:86:e8:fc:eb:8d:08:95:2a:
0a:4f:9f:54:0f:3d:75:f1:27:6d:a1:d5:5c:fe:00:
b1:83:ad:a0:6b:31:7a:8d:e8:87:38:b6:c4:53:e5:
2a:a9:00:73:73:3b:a3:de:cf:af:e6:9f:81:6b:70:
90:81:8c:01:13:fe:da:93:11:a2:01:19:6a:72:96:
4f:16:d4:cc:40:f5:b2:76:c7:43:2f:1e:94:26:9a:
7f:31:d9:36:2d:3e:1e:7b:45:1a:de:6c:c9:7d:0b:
d5:ba:30:b6:27:c9:ac:dc:2a:e2:11:b5:8a:a2:a9:
b8:af:c5:82:81:46:fa:84:c3:60:98:ba:6e:d5:76:
3d:42:ac:98:a3:06:7b:d5:68:e7:f6:1a:5b:31:a4:
be:99:66:30:c2:d6:f0:61:12:c7:4c:d0:ca:5a:ec:
2e:9d:8b:bd:db:31:04:c8:9c:17:6d:95:3b:5e:09:
14:1c:18:91:0b:24:e1:62:14:e8:d8:df:66:2e:78:
9e:b4:26:f5:0c:95:86:38:7b:ca:73:65:88:39:f6:
7c:45:ec:34:43:71:ec:b0:58:7f:03:79:f2:bc:24:
c3:f6:e0:6c:1d:b6:2c:97:44:9b:eb:ca:5b:a7:08:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.6.0/23
IPv6:
2a13:da80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199162
Signature Algorithm: sha256WithRSAEncryption
10:ba:d4:0e:39:03:52:45:84:ba:57:cf:12:23:ba:01:cf:76:
8c:3d:10:13:03:40:8c:25:6b:10:10:f1:52:d9:02:1f:ab:e6:
d9:71:17:fb:a0:f3:de:6c:dc:d9:19:b2:cf:54:bb:d1:1e:05:
e8:f6:ac:ab:f1:8c:bd:97:0a:68:6b:de:b6:10:28:aa:5d:0d:
63:d3:ff:15:db:26:59:f5:56:48:34:52:b7:dc:2c:7a:e3:a5:
99:66:7b:04:89:e0:a6:f2:ab:72:86:ea:b0:c2:f9:10:79:b4:
92:2b:41:ef:a1:01:31:cc:ac:29:bd:a5:56:a4:f7:93:6a:f8:
c4:51:d4:de:97:d0:bf:d8:48:4d:95:f8:4a:54:07:a6:4f:22:
ad:34:16:fa:04:8f:8e:19:cb:8f:ce:f5:cc:f9:ff:3e:60:f9:
44:5e:44:63:0f:58:f2:47:96:f9:15:42:e4:8d:35:28:09:c0:
ec:d4:1b:73:e5:c8:a2:1e:1a:b5:62:5f:88:0c:29:2a:60:79:
04:fb:91:41:88:71:3c:d7:b8:af:3d:11:4b:52:47:0e:ef:1d:
35:a8:ea:0d:63:fe:ea:ea:47:e2:9c:ff:3b:de:1f:6e:4c:db:
14:05:4b:5d:fc:46:e8:12:88:8d:95:96:37:32:6c:42:1b:a7:
5d:de:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:55:40 2024 by rpki-client on console-fra.rpki-client.org