Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
File: j6c6fMHk0392QDaHfEKB2osAkH8.cer (raw, json)
Hash identifier: VcvgSwX3ofD9U3izLKUgQh4WtJcdu+IShNVVDR2e6yU=
Subject key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349647EF397369EC96BF465FF56A561
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206591
IP: 185.181.176.0/22
IP: 2a0a:d080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:64:7e:f3:97:36:9e:c9:6b:f4:65:ff:56:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:19:b1:92:ad:91:9f:89:f5:48:5e:ac:b2:
37:e7:4e:be:56:47:03:c3:87:cb:2f:e7:b0:bc:d3:
7d:13:d3:0d:ae:93:f5:1c:55:e5:f7:bb:3f:05:69:
3b:8e:20:0e:68:6c:76:6f:96:a2:e7:26:ef:5c:9c:
75:e6:3e:61:77:6d:5b:a3:c8:dd:f2:ac:7f:f2:54:
90:c7:e0:00:b6:08:0e:96:41:77:46:34:66:7d:af:
58:91:0c:ca:ef:85:be:bf:aa:98:cf:4d:ba:ce:4c:
f8:40:5c:1d:af:95:fa:84:f2:c2:eb:4e:47:5d:22:
21:d6:1f:9a:02:b2:b8:2c:45:82:67:f6:60:85:cb:
00:3b:1e:a6:4d:a3:5b:0c:f4:6c:9a:ab:c6:3f:bd:
25:eb:dd:d6:d2:0c:2e:21:40:a0:e3:b3:4d:3c:ad:
52:fa:b0:3f:02:ae:1d:bb:7a:7f:8c:5e:01:93:91:
f3:22:1f:8f:4b:0f:e0:d1:e0:b8:89:cd:3a:58:de:
50:c7:2b:a8:b9:4b:8f:cc:f9:09:08:a3:32:29:ed:
3a:dd:ed:7f:46:5b:cb:f7:6a:e9:7f:1a:66:1c:92:
e6:38:d4:e1:4e:20:35:3e:e6:d1:94:3b:9b:d3:8c:
e2:87:50:47:e1:8c:64:26:14:3f:3f:f0:16:79:1f:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.176.0/22
IPv6:
2a0a:d080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206591
Signature Algorithm: sha256WithRSAEncryption
12:8b:80:4e:72:58:dc:e2:56:27:1d:cf:3c:4c:5a:ba:0b:7b:
e9:4e:f3:2e:50:13:2a:55:25:93:cd:e4:56:ab:1a:0b:35:63:
c1:94:54:25:75:19:e6:e7:05:f2:a1:b2:15:19:7d:56:51:2f:
7c:0a:bd:6f:66:4b:3c:a3:a7:67:00:2a:b6:a4:a6:a6:91:69:
4c:84:00:5e:16:12:ef:69:ef:e6:0f:01:d2:ae:ee:30:cb:54:
4f:90:a9:40:4d:19:99:8b:c2:e2:fe:5f:ab:e3:d1:ee:c6:6f:
16:a8:45:a5:3e:5b:61:c0:fd:cf:0a:83:ee:ec:72:2c:80:a2:
70:d5:01:4a:0b:47:18:cb:84:4e:08:0c:ee:59:51:58:32:9d:
45:b4:6e:5c:3f:a7:64:cd:f2:c0:7f:c0:d9:e9:dd:9b:ac:f8:
95:11:4f:2e:a4:ba:1b:97:17:7e:63:73:83:a5:74:33:09:75:
08:99:10:67:36:b6:b4:2f:90:1f:ba:55:c4:8e:6e:38:53:8a:
6c:19:48:43:95:ea:2c:a8:bc:72:99:94:ee:d8:c2:4b:fe:7f:
5e:bc:15:ff:08:c7:a7:e3:99:87:28:4c:2e:e8:f5:55:07:5d:
2c:6b:1f:d1:98:c4:04:6f:3e:19:77:46:24:99:4b:f6:72:b4:
eb:f9:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:13:04 2024 by rpki-client on console-fra.rpki-client.org