Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
File: tCV3H5kv1037Bzbmla61nGr2fpM.cer (raw, json)
Hash identifier: 8TUuKhe7Ff5BsoKP7KHOIkhDwjFe7HaJU/S4YJ1ga0I=
Subject key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E52EC3A8BEEE096BB2FB5E56C99E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51438
IP: 194.77.158.0/24
IP: 2a13:b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:52:ec:3a:8b:ee:e0:96:bb:2f:b5:e5:6c:99:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:b5:c1:25:6f:88:34:ab:58:1f:2a:53:d6:
7e:f9:d0:67:1d:02:a8:4b:5e:70:6c:6f:f3:62:6d:
e8:eb:4d:c1:f3:5b:b6:95:51:1d:37:79:ec:e3:d5:
d2:e2:45:d7:18:0b:ff:bb:e7:04:cb:78:ed:eb:98:
19:b3:61:ea:ed:4a:c2:49:ab:18:91:28:ed:4c:dd:
69:33:5c:f4:0d:6e:0f:81:80:52:89:4f:2a:c1:ed:
d4:9c:46:f2:68:fc:18:ab:63:57:65:d7:42:5a:c7:
88:02:72:2a:fd:ca:22:c1:4b:27:a0:85:b8:44:6d:
36:a6:3c:2a:73:ca:58:4e:72:3d:28:69:20:03:c5:
d7:d5:7b:8f:32:f0:d0:2b:48:31:d2:a7:98:f4:67:
41:24:fa:59:5b:36:f0:91:e1:bc:f7:d5:4b:bd:18:
5f:b6:de:a0:64:a3:25:95:22:e0:b8:da:d4:b7:0c:
36:e9:c6:0d:70:00:66:0d:82:fd:08:61:c0:49:05:
51:0f:b1:49:e0:4a:24:07:01:ea:21:66:28:eb:87:
1f:72:c7:5c:c8:58:e4:f3:b1:05:5b:ef:0d:71:d3:
51:2c:4a:fc:c6:e6:ab:72:71:c2:f4:38:01:af:5e:
c0:ab:49:b2:5e:11:a3:a2:a5:48:b6:30:08:a1:ee:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.158.0/24
IPv6:
2a13:b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51438
Signature Algorithm: sha256WithRSAEncryption
49:ac:68:4f:2d:25:65:e7:5f:e2:4a:6e:08:e2:27:73:b6:6a:
0d:86:63:b0:65:85:9c:91:23:81:6f:89:6b:62:fb:f4:2c:b6:
7c:20:77:2b:b2:a9:80:ee:db:0b:ac:bd:f9:3d:b7:ce:48:d8:
e4:4d:1a:a8:61:0b:d1:f9:5b:72:3a:d9:55:bb:a1:e3:12:00:
34:4c:7b:a7:29:ed:76:3d:c4:87:89:24:e0:a3:56:c2:d8:01:
5b:ef:77:3b:93:f3:e2:59:8e:21:f3:d6:6e:cd:90:e3:02:a7:
8b:3b:ac:3f:cb:6f:0d:e6:7d:d6:82:3b:37:47:25:70:af:d1:
ec:67:a9:66:68:d5:64:1e:dc:73:5a:d3:0c:99:62:06:97:ba:
b3:9c:ea:cf:b2:e6:84:28:a7:7a:38:37:02:bf:76:66:b1:ec:
51:30:a0:77:6a:08:b9:50:97:a1:b4:d4:13:f0:20:6b:7d:a4:
4f:75:bd:58:0e:22:58:be:18:40:60:f8:2d:86:72:31:a9:01:
2e:f3:48:41:bd:e9:34:a9:21:8b:d6:3a:63:18:24:de:81:fd:
b8:56:26:3b:1b:62:e0:22:10:d5:ce:e3:36:2c:bb:fe:fd:89:
b1:26:b2:74:8f:6d:fd:5f:61:4d:dd:b2:d1:3a:d7:96:da:0e:
9d:ca:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:22:15 2024 by rpki-client on console-fra.rpki-client.org