Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.cer (raw, json)
Hash identifier: zq+2n0Yixu8DWLbM+ByiH9Jn72ElW1fXzj3Z9XWIqzQ=
Subject key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01906CE566D5518779AD869692061BD39635
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jul 2024 06:04:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215444
IP: 193.242.185.0/24
IP: 2001:67c:ee0::/48
IP: 2001:67c:ee4::/48
IP: 2001:67c:ee8::/48
IP: 2001:67c:2c30::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6c:e5:66:d5:51:87:79:ad:86:96:92:06:1b:d3:96:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 06:04:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:18:be:f5:10:13:ae:0d:2f:ed:c6:66:ca:
80:58:12:92:6e:b7:e7:07:40:50:89:5b:83:20:d5:
c5:8e:c2:42:7d:f5:84:c8:7f:4b:06:20:c2:12:9b:
c9:fd:21:73:72:a2:56:9a:fd:1a:75:b3:98:81:09:
1c:b2:0f:78:4a:12:18:76:60:d1:34:94:fb:dd:c5:
0f:a5:1b:e3:13:b9:f4:c9:6c:56:88:29:fd:0a:90:
71:ef:4c:97:12:74:8d:ae:47:39:f4:0e:a7:10:78:
ec:ca:61:db:3e:e5:9b:dd:44:58:d3:9b:a9:e7:65:
6c:71:d5:7a:ed:5f:96:db:e6:df:85:bc:39:37:dd:
c6:9d:69:02:19:b3:e5:14:d1:72:37:a3:f0:83:05:
1b:af:32:ed:86:b1:0e:07:db:bf:5f:fb:56:36:15:
c4:72:ac:2c:4f:7f:bb:d5:d4:30:51:3a:f2:1f:ae:
da:c5:9c:10:08:b3:5f:65:c0:57:9d:4a:0a:fc:bf:
b3:9a:0e:68:88:17:99:6f:41:df:3c:24:1d:fd:8a:
df:d4:55:7a:1a:98:f2:f8:4b:16:4e:da:78:40:41:
50:53:9a:4a:ca:c4:cb:fd:93:6e:d6:b8:1b:e2:df:
4d:95:12:c1:26:98:5d:70:d8:57:fa:9b:bb:18:a2:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.185.0/24
IPv6:
2001:67c:ee0::/48
2001:67c:ee4::/48
2001:67c:ee8::/48
2001:67c:2c30::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215444
Signature Algorithm: sha256WithRSAEncryption
29:59:cf:6e:19:e0:cf:93:1a:c0:60:56:36:37:52:71:82:ba:
30:24:1e:48:30:ae:72:bd:a8:46:41:6f:6f:c7:ae:f6:7c:7e:
43:ea:b0:d9:b8:49:c3:7d:a5:81:0f:53:e3:70:4b:59:8d:73:
6a:db:ec:e2:a3:76:37:43:92:5c:7e:c8:2a:07:85:45:05:10:
0b:43:6e:d0:8b:f7:13:21:03:84:ea:57:39:bb:c0:30:2d:51:
7c:37:cc:6d:56:70:e6:c3:de:5c:19:5e:24:02:38:9f:01:19:
5d:6c:54:77:cd:a3:a0:20:0a:d7:fa:83:ee:7b:6e:ce:26:cf:
09:73:21:a6:d4:17:36:3e:17:4e:7e:09:4b:45:fb:97:d5:e1:
d2:0b:3a:8e:4a:07:10:5b:2a:00:a4:41:04:06:3f:1a:e5:13:
3b:bc:b4:20:7b:f6:6a:aa:02:4d:53:b1:75:f2:68:2f:ab:a1:
c2:f1:22:7f:b5:46:ec:be:78:c1:57:b1:cc:de:12:2c:d8:1c:
b6:73:82:c1:64:43:b2:9d:c3:e2:00:ae:0f:c2:55:db:72:0c:
74:01:cd:2a:42:f3:c5:04:5e:75:d9:1c:12:b1:2d:aa:71:dc:
01:4a:a8:b4:3c:e1:7f:6e:41:b6:c8:ac:60:0d:11:01:45:22:
72:11:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:10:35 2024 by rpki-client on console-ams.rpki-client.org