Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
File: pcJJ62-mtduvarnes6d3juDrNIc.cer (raw, json)
Hash identifier: cGQLTJM4RG10JX1i9y/jTic0sghVxE9xXeJpMAiRXxs=
Subject key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA84AF5DF453AD6A28630D3A03DF861B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Feb 2024 15:45:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215489
IP: 170.237.0.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:4a:f5:df:45:3a:d6:a2:86:30:d3:a0:3d:f8:61:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 15:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:53:01:a5:2c:4d:bb:56:05:7e:0c:73:48:
3c:63:88:db:80:8b:4d:e1:a7:91:e5:4f:f7:55:0b:
de:d4:23:32:a3:cd:7f:26:a6:25:1e:b9:60:ce:f3:
ac:6e:3b:37:25:dc:43:ee:6c:db:96:af:4c:53:f1:
fc:1d:0b:89:be:ef:58:f6:eb:62:09:e8:d0:f7:3d:
3e:f0:4d:f9:33:5b:cc:c4:c4:5e:bf:8b:0d:24:41:
ee:b3:81:ae:e0:6d:18:6f:a2:30:5e:b6:2d:13:7c:
3c:aa:f6:99:c6:c7:33:41:91:41:96:6c:7b:7d:6b:
68:b6:90:29:af:7f:a8:41:e4:fd:75:36:20:f2:4b:
f0:c7:55:38:ff:08:a0:07:1d:18:37:01:b2:27:51:
eb:06:f5:16:e1:49:50:09:0b:40:ff:bd:54:d2:0a:
93:3b:ca:4f:56:6a:9e:6f:c1:13:6f:76:c4:2c:19:
9a:cc:28:5c:81:e7:5d:ac:6c:4a:8d:fd:6a:fa:4a:
f1:6b:d5:94:f7:79:ed:f7:5d:34:d2:7a:00:a4:cf:
0f:38:f7:40:4c:a0:66:a5:42:1f:6c:dd:5d:7e:52:
05:d5:47:af:c6:3e:7d:1f:71:af:69:b5:c3:99:ad:
47:c5:fe:b3:03:86:59:e1:eb:24:65:7d:64:af:4b:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.237.0.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215489
Signature Algorithm: sha256WithRSAEncryption
51:d1:d2:bc:8f:e1:d9:09:31:8e:b9:3d:35:8d:71:f6:32:b8:
69:ff:32:68:ae:d3:e7:e7:d4:e8:25:41:82:ee:0c:ec:6b:ce:
6a:d6:ee:db:0f:45:7c:a2:ba:d7:fe:0a:b4:1e:08:a0:5e:d5:
7e:6f:01:81:cc:e4:cf:4a:27:c4:b1:ea:7c:8a:d9:ce:f9:3b:
91:7c:97:36:a5:72:5f:79:45:7c:4f:07:16:e9:69:d0:b9:3b:
f5:40:fa:c7:04:0f:5b:55:a4:6f:d3:c6:0d:8d:8f:34:4d:21:
c1:59:dd:73:4e:bc:10:6a:76:32:0e:04:72:1c:39:7c:6d:70:
2d:4b:cc:03:ca:fd:e4:46:fe:59:11:2a:74:54:24:a4:9b:aa:
1a:6e:2c:94:d7:33:21:f1:cd:1e:94:eb:6c:ca:eb:53:7b:17:
fc:cd:c9:6e:44:ef:9b:0c:81:3a:51:d5:67:b8:df:71:e8:ec:
9f:1c:17:9e:cd:5d:c1:3a:ed:12:7d:89:5a:77:e2:5b:02:75:
40:05:ae:a4:48:c3:14:53:70:06:49:e9:8a:51:8e:57:2b:98:
a9:08:da:73:43:0d:d9:58:a2:33:8e:f7:46:62:bd:df:1a:b6:
b0:e1:40:2e:99:6c:11:3e:f3:da:a6:f4:1d:4a:e3:5c:a1:fc:
97:02:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:01:50 2024 by rpki-client on console-fra.rpki-client.org