Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.cer (raw, json)
Hash identifier: PuU32jPvvLOcda8+O7QkZtLgzJt3m429VUXJhbckJ7g=
Subject key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4934AB9311659096268A458311624BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205994
IP: 144.2.144.0/20
IP: 2a0a:a240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4a:b9:31:16:59:09:62:68:a4:58:31:16:24:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:0d:37:1a:ca:98:08:98:4a:22:1c:67:d5:
c1:23:86:ba:b7:c6:86:68:c2:20:a5:f7:ca:58:96:
f7:50:a8:8b:0b:37:c6:0e:ec:86:60:e5:1e:58:3e:
09:51:5f:46:11:eb:c2:d2:e2:47:53:da:b6:cb:4e:
ab:fb:96:89:f4:bc:6b:e7:1c:ae:52:67:0b:37:e5:
8d:bf:c2:41:f0:75:2f:fe:e1:a8:f2:27:b0:d3:38:
b0:14:91:49:b0:78:0b:53:0a:71:43:d2:a0:7f:2f:
62:84:9d:70:d5:df:4f:d1:88:b4:ce:b2:a8:8e:ed:
76:8d:c6:33:38:ec:6b:d0:3b:fa:37:c3:fa:15:65:
be:26:37:19:b2:dd:14:6d:0b:e0:bc:08:6b:55:89:
bf:ee:c7:49:a6:e2:fb:87:73:d6:62:7a:cf:a0:5b:
d5:24:5c:0f:7e:af:ea:e1:c9:2a:f0:d1:56:73:31:
6f:46:5c:4b:e3:30:b2:ca:62:85:de:f8:65:24:a4:
fd:b5:18:8d:da:09:8a:bf:85:55:c4:0a:10:53:01:
00:8e:8a:8c:c2:d1:af:d7:e6:3c:82:f9:fb:e7:e8:
24:dc:43:d6:c6:7d:31:87:fb:46:71:ac:53:db:60:
d1:3d:1a:ea:4e:a0:30:b0:07:8d:bc:96:ff:d3:59:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.144.0/20
IPv6:
2a0a:a240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205994
Signature Algorithm: sha256WithRSAEncryption
51:ab:c5:1b:41:ce:cd:22:bf:3f:c1:cd:64:92:e8:d6:0c:d8:
13:3e:2e:52:fe:63:0d:16:21:aa:7c:f5:8d:26:3e:71:d5:4c:
77:5d:1e:f7:df:74:cd:da:36:60:66:18:32:da:2f:0d:97:e2:
bd:c3:ea:86:06:e5:e8:b9:19:58:bb:6a:53:3a:e3:ac:f7:5d:
30:2b:09:76:89:82:6c:63:79:d1:a5:a1:2b:ac:d6:45:cd:de:
40:b8:da:ec:5f:97:ea:8f:83:4c:b0:8c:ae:f9:27:67:17:ed:
5c:81:cd:00:c2:8b:bc:c4:fd:c1:d8:05:40:53:b9:1b:7d:0d:
14:48:75:38:42:2d:48:76:11:cc:7c:70:f3:fa:bf:82:9d:b4:
be:76:e0:47:ff:39:4b:56:7a:10:c6:94:f3:5e:20:4a:27:cf:
83:0a:54:1a:f2:cd:13:c9:df:7e:ef:50:3c:6f:f6:ab:7e:a1:
ce:d2:1a:fa:86:5e:35:82:1c:98:07:94:4a:32:4b:2c:ac:df:
1d:44:8d:23:fa:73:83:b2:70:03:fb:59:c0:f1:ab:b1:3f:d3:
01:0b:e7:3e:cc:d5:59:83:5e:34:87:5c:c4:a5:26:91:84:e5:
36:5b:f4:93:9f:11:8d:bf:ae:45:23:af:bf:88:91:fc:88:d4:
20:b0:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:44 2024 by rpki-client on console-ams.rpki-client.org