Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
File: q6-0Li5v0JBX_KIbmQhNrDt68tA.cer (raw, json)
Hash identifier: 6CYgA6+FhDU2BAl9s3IKWUDDVyQRciKZxFcAGQW5cks=
Subject key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8019E65965F801556EBD0E2CD06CD4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200295
IP: 80.64.208.0/22
IP: 2a0d:1c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:9e:65:96:5f:80:15:56:eb:d0:e2:cd:06:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:dc:ea:4c:5a:bc:9f:f4:bd:93:94:50:dc:
a8:b5:d6:15:4f:5a:20:bc:ad:4a:27:8d:dc:32:0a:
00:9a:c5:0e:5b:37:36:82:85:0a:3a:45:e8:08:16:
c3:8f:19:a2:9b:12:86:47:53:6a:a4:e1:c5:a2:c5:
b5:18:c0:57:27:08:df:58:e4:97:e6:c0:bc:54:9e:
9b:52:d7:63:a9:28:f4:dc:24:01:f2:ce:77:07:70:
ca:b7:aa:5d:f7:84:3b:a9:6c:09:62:75:fd:23:77:
ed:c4:01:a0:ac:dd:d7:95:bb:bf:0e:16:d9:25:1b:
4f:d4:50:a4:af:ac:0c:58:39:b0:19:cf:4b:25:9a:
f8:76:53:31:df:fc:04:fd:60:a7:fa:d2:65:49:0f:
cf:fa:d6:85:71:6f:fa:ec:25:bb:f2:f0:85:43:0a:
4b:ce:bc:97:be:46:dd:71:cf:de:8a:0e:06:1b:87:
35:3d:ec:1c:a7:70:3b:3c:23:61:2c:78:92:cd:c8:
20:5c:96:bb:ab:65:3f:68:c6:00:d7:79:e5:13:26:
59:ee:70:47:88:c3:8e:cb:db:f9:d0:65:19:3f:39:
ab:10:a9:91:bc:9a:6c:6a:57:ad:30:e3:5f:be:c3:
ae:07:e6:b9:55:07:72:cc:27:37:08:40:06:e6:e5:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.208.0/22
IPv6:
2a0d:1c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200295
Signature Algorithm: sha256WithRSAEncryption
aa:23:00:46:59:e3:14:a6:52:f7:22:86:04:aa:3a:45:5d:7b:
b5:5e:0d:7e:15:65:02:d8:05:a9:b0:07:4c:d5:9d:ca:01:e1:
ac:6d:c3:27:4f:d7:04:70:07:e3:a5:69:81:8b:3c:90:6f:b6:
38:6a:35:e5:d3:75:4f:0e:cf:74:6d:11:39:69:76:1c:95:73:
b1:5b:b8:e3:20:61:da:34:a1:49:ad:7c:15:b0:ee:0f:4d:80:
97:16:ef:eb:bf:d4:99:06:0c:1f:ec:e5:b8:40:bd:89:a8:fd:
b4:06:61:36:f6:8f:ff:3f:b4:3b:98:86:2a:ca:98:08:56:c6:
1c:dd:a3:d0:1a:fa:69:e9:df:47:22:04:d0:7f:6a:d1:35:27:
22:5d:cc:b9:4d:4c:f7:01:b1:97:03:d1:29:79:a2:37:dd:9a:
ba:ee:45:27:e9:ea:1a:fa:c0:5b:29:dd:0a:ed:35:14:4c:12:
db:40:1a:64:54:4d:7f:ee:15:cc:ab:2b:72:fb:00:dd:b6:81:
07:2d:c3:2b:d4:01:f3:94:ab:a8:8c:96:42:d0:14:e8:02:3b:
ba:3b:e3:3c:8f:a2:18:82:f9:a8:78:26:fd:9d:84:41:0f:1a:
a7:8b:f4:de:8e:64:3c:a5:bc:8b:05:98:1e:b5:ea:bb:a4:a9:
69:b0:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:15:13 2024 by rpki-client on console-ams.rpki-client.org