Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
File: jZg6B-bbi8SUyI370TF7qBDS0no.cer (raw, json)
Hash identifier: +pYv8etF2xDsKxx6LIDdcX7tWC3wTE9ZUSGfaoM3eBY=
Subject key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB0C1A3E3E4B87832792E252206742
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212606
IP: 185.178.49.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0c:1a:3e:3e:4b:87:83:27:92:e2:52:20:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:41:a1:e0:2c:62:e9:ac:d1:0c:bc:08:0f:
80:eb:0f:02:ca:8a:8d:75:f1:10:7b:a2:a9:eb:17:
9b:74:78:e4:25:73:67:01:15:08:de:38:6e:8b:24:
08:ec:ec:d3:9a:c1:99:76:68:71:d8:d5:e0:bc:b5:
2a:61:3c:aa:fe:ff:23:f4:d7:a9:0e:29:84:1f:33:
f9:27:6c:f3:21:ae:8f:60:61:24:3e:06:8e:a2:0e:
af:c7:93:77:0e:3b:96:f0:1c:ba:85:af:83:7b:4a:
df:10:b2:1f:8a:03:11:43:74:c3:f7:5b:85:70:01:
2b:8e:fe:2d:a0:15:9b:52:79:65:2a:f1:5c:9e:a0:
80:31:f0:2b:f2:09:95:92:87:fc:46:e3:26:d0:18:
e5:57:a3:aa:17:3f:b1:6e:33:b1:e5:e6:86:b3:52:
bc:0f:7f:db:3c:b6:10:40:06:a4:07:13:56:c9:c8:
21:bb:6a:4a:a8:8c:bd:11:40:81:89:99:ed:f6:fd:
8c:f9:d8:3a:3a:5c:23:ae:56:7f:65:41:b0:99:91:
4d:d4:f9:35:09:8e:46:15:c0:be:4e:53:d0:93:68:
0a:ea:11:29:09:33:ca:7c:af:8b:25:83:b4:e0:d5:
cb:e0:62:83:78:5c:a9:fb:bc:5c:70:a1:cc:16:78:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.49.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212606
Signature Algorithm: sha256WithRSAEncryption
14:aa:ad:50:cf:dd:23:f0:ac:04:f9:c9:03:b7:39:bd:c1:85:
01:8b:47:21:b3:29:ce:31:b4:88:05:ef:7a:d1:63:31:f3:f2:
08:c6:d6:7f:7d:56:4d:e9:28:12:04:7e:7a:8d:56:81:99:20:
cd:77:01:2c:77:ec:1a:19:74:f1:38:d0:39:e7:d9:f0:8d:67:
bc:3f:6b:b7:cf:1e:0e:20:a0:ff:86:0b:55:d7:a3:2c:8c:2f:
a0:e8:f6:5c:1f:7b:e9:4d:98:f7:e4:dd:68:c6:a6:ac:41:25:
95:66:d0:86:c1:de:3c:d6:8f:20:23:0e:27:a7:04:77:1e:36:
e2:69:92:4d:aa:35:59:ea:dc:d2:68:e9:20:4b:54:80:ab:40:
29:5d:b6:7b:2d:1c:f6:8c:79:34:8e:01:ac:cd:11:46:16:0f:
b3:83:41:c5:1a:6f:46:87:a8:44:63:6c:d8:20:fa:71:8e:76:
cc:c5:78:f0:7a:8b:c5:50:82:02:0c:ec:3d:de:d2:6e:5c:ff:
21:98:5f:77:4e:ea:c7:cb:be:12:bf:13:ab:f5:74:1e:ec:68:
98:78:58:9d:c5:93:b5:30:75:2d:4c:ed:12:0a:2a:66:f3:bf:
ae:78:db:05:be:a7:3a:8d:c9:17:a6:e9:a1:48:db:87:6f:0b:
f8:e6:4f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:25 2024 by rpki-client on console-fra.rpki-client.org