Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.cer (raw, json)
Hash identifier: BYacSje9XM4ga2BruLgmL6/3DP1BV9QM6RFb5rvUWcY=
Subject key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49334C07FBFBC1A92E524AFA624C84F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50557
IP: 193.105.110.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:34:c0:7f:bf:bc:1a:92:e5:24:af:a6:24:c8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:49:74:2d:a3:57:e7:eb:7d:ca:48:61:b9:
d3:b8:89:9d:62:5c:af:ba:9f:51:1d:91:a6:e7:ca:
f8:54:53:ff:33:85:7d:33:c6:80:bc:86:f1:23:07:
f2:29:26:9a:89:3e:e5:73:8d:40:d8:9c:36:91:26:
0e:39:f7:09:c2:3b:ea:31:b2:1d:de:3a:fe:f6:ca:
83:e7:e0:99:95:ee:23:f9:be:a9:e1:f4:85:27:d3:
01:e0:d1:f3:01:fd:e6:ad:56:97:b6:76:51:b7:fd:
b1:72:2f:d1:fc:83:a0:91:e1:b6:f9:c4:5e:85:de:
d5:61:f3:e0:b1:9e:95:b9:69:b2:dc:28:9e:c0:ef:
81:95:97:c1:20:6d:b7:6c:d7:7a:c2:35:84:8f:51:
5b:5c:16:10:c9:31:23:c1:0a:c3:b5:7e:ab:b8:6e:
8e:b5:2a:06:c6:08:2e:4f:31:ac:97:1e:7d:8c:4d:
29:22:a9:3c:a5:71:5e:75:c1:51:b9:6b:a5:2c:8b:
00:cd:b9:91:cd:ad:77:73:5f:3d:99:b3:51:13:1d:
40:0b:71:2b:9b:4d:29:c6:dc:ec:13:c8:7f:0a:34:
f0:c2:88:b1:b3:63:2c:9a:07:d1:63:0d:8c:e8:28:
0f:21:11:dc:b9:45:3d:af:b6:4a:32:58:fe:af:71:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.110.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50557
Signature Algorithm: sha256WithRSAEncryption
10:53:95:d5:f4:11:a3:97:f0:c4:19:4c:52:1e:19:7c:c0:8c:
cd:3c:2a:71:e4:9e:9c:77:4f:ab:6c:77:be:d9:f3:4a:be:d4:
67:17:96:42:8d:8f:7c:a5:58:af:0e:24:2f:4e:e1:31:9f:e4:
57:a4:1a:80:94:f8:13:ec:88:9c:41:ed:02:88:30:f6:2b:55:
f2:7e:16:5c:2e:a4:40:02:72:25:d3:5b:bc:a3:7d:d7:d3:24:
87:b6:f6:aa:3a:86:6c:75:6d:79:58:06:44:98:97:68:c3:5c:
1d:f0:86:87:d0:e2:77:94:66:ea:38:79:42:5a:47:62:f3:c1:
c8:c1:79:e9:7c:4a:07:72:30:67:93:cd:e5:23:9e:10:58:d7:
2e:bf:50:2f:c9:3c:05:fd:23:61:ef:78:5d:a2:c1:fb:42:31:
56:6b:ee:24:34:02:5b:94:99:72:45:74:c7:79:1d:a8:bc:f1:
18:d6:1c:8d:55:0e:57:20:09:a8:91:4a:5a:f8:a6:1a:9d:02:
ca:df:56:02:5a:94:99:ec:7f:8b:f9:19:66:28:1e:31:44:d1:
76:45:83:9d:21:ad:0b:49:16:ad:0d:a7:63:0b:19:af:df:79:
9c:17:47:51:93:63:af:29:4b:c1:70:8b:8f:cd:ea:37:77:b8:
3d:8f:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:11:30 2024 by rpki-client on console-ams.rpki-client.org