Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
File: m9o0FBNxKfo4psYcSWq4thQJzgI.cer (raw, json)
Hash identifier: ds6mAGW7GJ7CLV6kzqgy7qnqwYYs0qV7V3slapaj9o8=
Subject key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42504C42F1D81231A987E645BC4B4F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34108
IP: 45.84.8.0/22
IP: 45.94.144.0/22
IP: 95.128.88.0/21
IP: 178.250.144.0/21
IP: 185.85.140.0/22
IP: 188.93.68.0/22
IP: 2a02:928::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:04:c4:2f:1d:81:23:1a:98:7e:64:5b:c4:b4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:a0:42:81:a9:a9:25:95:a0:71:08:03:b8:
5b:9f:6f:01:ec:ff:7b:8f:b1:d9:45:3f:91:28:3b:
76:92:ca:21:bc:18:64:98:26:40:1f:4c:bf:da:09:
a5:cf:c1:c5:79:56:06:2f:bd:0f:79:1d:ad:f8:18:
5c:1f:40:01:23:90:9b:b2:d4:e6:d8:05:9d:27:1b:
73:4d:0d:f6:37:34:4e:50:51:a0:a7:15:94:c5:e2:
1f:19:2a:bb:77:8e:1a:00:aa:79:20:7e:88:6b:87:
fd:5f:55:0d:11:e2:9d:67:28:a2:6d:6d:8e:9d:6d:
f3:dd:41:3e:cc:80:54:0b:aa:73:5f:ee:98:b7:5f:
68:58:e6:63:cd:bb:8f:7b:a7:82:86:20:b2:49:a4:
9a:da:f3:84:21:f4:19:22:65:94:b7:d0:09:bb:95:
a9:d1:c4:21:8a:7c:8c:13:d3:e6:d7:e2:b8:1c:f1:
b7:8e:86:e7:cf:21:54:95:7b:50:3d:70:e1:52:e6:
84:a3:32:3d:87:68:ff:84:cd:b0:1a:75:55:21:14:
19:8d:6d:a4:97:d5:2e:5d:85:2e:39:99:79:91:e3:
2d:d1:89:01:d2:41:37:6c:8f:d2:74:7e:03:24:83:
68:a4:83:84:11:bc:ba:27:4d:10:96:70:ee:b2:e4:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.8.0/22
45.94.144.0/22
95.128.88.0/21
178.250.144.0/21
185.85.140.0/22
188.93.68.0/22
IPv6:
2a02:928::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34108
Signature Algorithm: sha256WithRSAEncryption
03:c5:bb:c9:29:58:07:1d:2a:00:6f:24:20:b7:4c:65:c6:80:
3c:7a:60:dd:d7:55:b9:d1:86:02:0a:ce:68:2b:13:ef:15:2e:
12:60:ad:d9:b9:09:f3:a5:bf:77:2f:21:cf:5a:37:31:38:a1:
41:21:c6:75:39:62:f8:e5:87:bf:0b:80:f0:4a:d8:ea:09:5a:
c1:3a:4d:e7:b5:c7:29:09:44:c7:72:06:22:36:56:ba:eb:ab:
a2:ac:a5:57:7c:1b:48:f0:e4:a8:df:a9:60:e2:7e:49:f4:8e:
0b:23:d9:42:6f:dd:d7:04:3c:a1:b4:a7:08:76:50:13:9e:31:
65:1f:b0:61:49:e1:7e:3f:dd:b1:ad:db:99:a9:40:98:82:68:
96:16:9f:b5:3c:c9:65:56:f0:80:09:6b:6a:0c:fa:a7:cd:92:
d6:ff:76:75:28:23:1d:41:67:fc:d4:7e:ec:9a:0f:37:9c:4d:
32:04:fc:6f:d7:06:22:18:9a:88:42:13:f2:67:7e:ca:fb:44:
fb:b9:f2:c8:94:54:c3:cf:24:36:08:a1:10:c4:9d:b4:db:cd:
91:90:5b:4a:bb:42:42:e8:af:55:b6:a8:99:03:3a:49:d2:fd:
a1:ae:2d:58:c2:2f:39:d2:a7:e9:e0:70:71:17:80:f8:ce:8c:
28:51:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:13 2024 by rpki-client on console-ams.rpki-client.org