Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
File: p_555OY70WvEI3WStoTQBDPL0PY.cer (raw, json)
Hash identifier: jx/ZR5QPsNeWTtUUID9HRLYu0kox2Cx67hesgnjvdeA=
Subject key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC46128DE4AF14664C18DB58AB77CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44577
IP: 91.230.124.0/23
IP: 185.150.104.0/22
IP: 2a07:7080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:46:12:8d:e4:af:14:66:4c:18:db:58:ab:77:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:3a:9a:07:3f:e3:fd:01:5d:0e:05:1b:49:
14:13:ee:53:f0:b1:8a:9b:7f:76:4a:67:7d:ca:80:
0d:cb:b6:49:71:b5:d0:c9:10:eb:93:e6:2f:c3:28:
7b:32:a9:5d:49:74:0d:32:c1:d6:f6:73:fb:00:ab:
95:1e:79:c2:84:e2:a7:31:73:87:bf:eb:60:3e:f2:
ea:a1:d4:39:4c:ba:26:28:5b:75:1f:2e:17:b6:65:
4d:2b:3b:c8:1c:6a:07:f7:b1:e7:09:95:b7:af:9f:
5d:4c:e1:6b:9c:bc:a4:3f:54:24:f3:28:c5:61:77:
dd:20:37:ad:80:7d:29:96:7f:b5:46:b0:b0:37:fa:
5c:5a:0e:d7:db:35:7f:83:6a:8f:27:7c:63:3a:23:
09:36:d0:d2:de:51:9c:ee:ad:a6:c8:fb:e0:3c:0b:
98:67:e1:e3:66:39:50:b7:6a:86:9f:b0:d4:af:34:
6f:78:20:4e:0c:18:49:99:14:23:58:70:03:21:ca:
b3:90:46:aa:52:0c:05:15:79:58:b0:0f:50:af:85:
17:22:ab:79:9b:3a:f6:56:f3:31:d5:b6:aa:61:b1:
a6:0e:a4:82:dd:72:8b:94:69:8b:6d:a3:36:d4:3e:
53:33:d4:c6:f8:a2:b6:2e:dc:69:b3:b4:f9:3c:c0:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.124.0/23
185.150.104.0/22
IPv6:
2a07:7080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44577
Signature Algorithm: sha256WithRSAEncryption
9e:bc:03:82:27:ff:c1:fe:86:e7:d1:2a:71:aa:30:1d:c5:4f:
1c:85:d2:3e:fc:1e:db:33:f8:a9:1d:6d:84:06:a2:46:55:ef:
0c:82:75:67:58:5b:3f:63:80:d6:07:db:82:e2:47:d5:60:8e:
b5:fd:16:f1:23:a2:0e:d3:51:95:6b:ad:d2:55:91:05:ac:3e:
a9:fd:c0:78:04:aa:c3:60:1f:e6:29:67:fc:59:22:2a:68:45:
b3:6d:a1:bf:c8:43:c9:4f:a4:5c:19:a8:31:04:a0:23:68:2b:
21:f4:21:91:4c:cc:cf:62:f7:ca:ca:c0:66:c0:f6:23:e2:d7:
ce:86:5d:d4:83:c9:28:01:4a:fb:bc:5d:ab:b2:57:53:e9:a5:
c0:24:b6:86:bb:9e:14:4c:26:45:32:ec:93:9b:63:6c:4b:62:
e4:4f:98:4a:72:7b:02:9d:9d:9c:88:bf:62:5a:c2:9a:9e:98:
ef:45:86:79:20:2d:ba:c4:24:fb:e7:d0:09:1d:87:7d:9b:bd:
95:af:ad:f2:3f:fb:80:9a:10:8e:dc:fe:3a:00:00:3e:83:4a:
25:3c:11:dd:06:de:ec:db:a0:bb:97:aa:9c:6b:86:1b:ac:47:
7b:cf:7b:97:ca:8b:fe:ba:1a:3c:f5:62:67:bf:eb:1f:29:a3:
0d:18:97:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:43:54 2024 by rpki-client on console-fra.rpki-client.org