Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
File: r6R0pepgHICSke55uuORiWTQhx4.cer (raw, json)
Hash identifier: ce6nedchGA594y74k873GZOy1ACLERoYatq2Vy9fDdY=
Subject key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB00E05D6BEA22A4CF99AAF6C06C5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39803
AS: 48736
IP: 91.209.241.0/24
IP: 195.189.138.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:00:e0:5d:6b:ea:22:a4:cf:99:aa:f6:c0:6c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afa474a5ea601c809291ee79bae3918964d0871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:b9:86:4f:69:61:c5:8e:28:1c:cc:db:46:
51:c2:f3:94:4e:7b:06:b2:8a:74:8f:40:46:dc:07:
ff:4e:b1:20:30:fe:7d:0b:61:a3:38:b8:42:7f:9c:
24:ef:b4:16:9c:94:1f:79:94:ac:e8:fd:39:c6:8c:
e8:9e:67:01:5b:36:7f:01:bc:7d:72:de:11:ea:23:
0e:9f:ff:51:d8:65:e4:26:f9:8d:6e:dd:5b:4f:02:
83:ae:87:f7:54:7d:0b:24:6e:f0:31:f0:69:ab:71:
ea:f1:ce:01:c6:fe:be:97:64:f7:27:47:3c:54:19:
b1:9d:14:e0:a2:94:47:2f:9b:99:0b:a9:06:54:fb:
49:ec:e5:2e:b7:7b:61:bd:0a:55:46:f2:e2:00:db:
98:27:ba:e6:99:e4:57:b1:fc:bf:ff:c0:b9:6b:db:
cc:07:00:30:15:4c:85:70:e8:ad:63:c6:75:60:b5:
9b:fe:fb:f7:7c:92:91:f0:83:17:4d:36:5a:48:17:
bd:0d:b8:62:2a:e6:8e:32:78:54:68:f6:50:db:52:
87:6a:4f:c3:aa:41:2d:2d:67:0d:12:77:f7:c5:46:
c7:b0:b7:be:ea:94:b1:9b:68:63:4c:e9:3f:84:7b:
fc:8d:73:75:20:48:b0:67:a4:ae:76:ab:b7:2f:8f:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.241.0/24
195.189.138.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39803
48736
Signature Algorithm: sha256WithRSAEncryption
34:81:30:8d:74:ac:b8:59:db:07:ff:5b:23:28:9f:18:8f:44:
f9:49:3c:f0:7f:7a:b6:87:7b:a7:64:91:6e:1d:f1:e5:1e:4b:
ca:1b:e2:b9:9d:51:fe:79:28:03:9f:c2:24:92:00:51:44:0f:
69:b5:c7:9b:f2:d4:dc:b5:3e:a4:23:fe:ba:f9:84:9a:55:5f:
f0:a0:05:88:6b:95:72:d6:6e:20:61:2c:69:3b:a0:30:7b:9b:
49:fe:d1:46:3f:ca:2a:1b:43:e0:c1:b9:cd:4d:0f:c5:e3:fa:
9f:65:b2:96:a0:e5:f2:b2:f1:09:c0:a5:bc:75:77:85:ab:d9:
d8:10:b6:e5:65:f7:1b:73:d3:76:04:88:57:e3:6c:95:21:92:
a9:10:f3:26:e5:d4:28:0e:bd:ee:f9:6e:9b:a2:db:cf:c2:40:
b4:f0:a4:17:28:c6:42:95:21:f0:1a:8a:63:bc:75:c0:88:59:
cb:14:05:78:f3:3f:f0:b8:ff:4f:ce:d2:42:10:53:04:4b:7d:
e1:66:79:7c:8c:d9:41:ad:cd:72:c0:41:c5:b4:e2:74:4c:d7:
20:6a:a3:97:3d:52:2e:fe:dd:f4:be:37:cd:01:87:4b:34:41:
61:08:16:b6:82:c2:80:d7:4b:be:aa:9b:8d:7e:d4:f1:2b:e1:
4e:cd:c9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:00:52 2024 by rpki-client on console-fra.rpki-client.org