Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.cer (raw, json)
Hash identifier: iSTsUPAV2v/tO0MNXlkTk+4/do2CCa3i359dK1Z4syg=
Subject key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50152358E374F8CDB76244990C1AA27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50117
IP: 193.104.61.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:52:35:8e:37:4f:8c:db:76:24:49:90:c1:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b5193d843af193e24875686673c95896eae3497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:be:50:48:09:ef:0c:0a:4f:d5:7f:97:ba:
7a:d1:52:c4:d2:4f:4c:94:eb:d4:3d:a6:29:d9:bf:
ec:46:7f:8a:59:00:6b:26:59:1b:a5:1e:7e:f8:58:
d8:25:3b:a4:e9:87:f9:18:9d:7a:b8:16:12:c7:a2:
f5:a4:7c:6a:6a:7a:49:db:3d:95:ce:09:1b:db:bb:
7a:27:ae:16:e2:dd:3a:5d:94:74:2d:17:b3:e1:21:
87:69:74:be:50:d0:7e:cc:c3:11:37:90:f3:03:04:
88:a2:94:45:fd:fe:5b:b7:9c:67:18:0d:b7:24:04:
e5:80:ee:a3:a4:6c:97:e2:8b:ae:6e:e9:90:2f:62:
16:c9:67:9d:70:06:23:eb:d3:53:fd:c8:f9:9f:34:
7c:ea:65:ab:66:f6:e2:51:8d:aa:e9:ee:c7:e8:53:
bd:6c:4e:c5:ea:df:c7:8b:18:00:23:2f:75:49:c0:
bd:1a:a2:dd:b3:f9:f1:60:cc:9f:03:d1:5b:9e:02:
05:10:72:6e:4d:f4:79:4b:cd:39:dc:b1:05:33:e1:
aa:3b:8f:9a:82:82:82:08:bf:57:a3:6a:d6:d6:2c:
45:d1:64:e0:60:44:de:3a:8f:9e:73:56:30:6e:fa:
5a:ed:aa:9d:1c:46:44:c1:ab:7d:4e:1d:42:f1:29:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.61.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50117
Signature Algorithm: sha256WithRSAEncryption
5e:64:bd:62:3f:eb:0e:52:1a:74:68:fa:4d:0c:cb:59:78:2a:
8a:ff:54:65:22:06:6a:12:f6:04:f3:47:17:9f:49:d8:68:66:
a2:cc:0a:1d:8e:c6:aa:f1:8a:b4:52:20:7d:51:2b:33:da:a1:
2b:35:5e:d5:22:a8:76:f9:c3:e5:b5:c5:f4:37:f6:e0:ab:e2:
39:8a:20:38:7d:0c:fa:8b:8b:7d:61:44:d7:bf:24:f5:24:99:
cb:4b:a3:d0:65:c4:55:83:05:c1:c3:29:ba:fa:c2:41:10:45:
bd:61:a3:fe:d1:66:bd:96:18:4f:f1:56:7f:e9:db:b4:3b:8c:
ce:bd:fd:4d:55:be:06:89:e5:30:25:b4:9b:df:e3:ae:49:ed:
e1:64:cc:80:54:39:b0:9e:04:86:f7:30:e0:97:01:cd:b2:8d:
22:ed:fb:26:3b:8e:af:31:42:2e:6a:06:d3:fa:00:65:44:20:
e2:5c:55:14:3a:b9:33:c6:ed:d7:7d:1f:f6:88:9d:1b:48:5e:
0a:e4:e7:34:b6:50:68:fb:52:a3:4c:1d:15:d3:e8:8e:96:44:
00:b6:42:4e:f1:db:25:bc:5a:8f:14:29:6b:20:f0:fe:47:f2:
7f:bb:cf:c9:d7:ea:33:09:25:39:a1:e2:dd:22:1e:ad:e4:4d:
a9:d7:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:40:30 2024 by rpki-client on console-fra.rpki-client.org