Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
File: tDgLm4wHBFftVLxF0S3d0kTgbVI.cer (raw, json)
Hash identifier: 9UYNCGI11nLkXZss18BgCYHPvKMp00+52LVNhoFJ4yc=
Subject key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBD6C1C64283D6E18B2D64E1BE8D92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21313
AS: 25485
AS: 29403
AS: 211369
IP: 81.19.192.0/20
IP: 185.100.0.0/22
IP: 193.109.220.0/24
IP: 194.110.75.0/24
IP: 217.30.80.0/20
IP: 2a10:eec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 13:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d6:c1:c6:42:83:d6:e1:8b:2d:64:e1:be:8d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:5e:69:11:1a:87:8a:fc:bd:2c:72:5a:5a:
4f:2e:55:3d:e5:88:1e:95:2b:f3:9e:f8:35:93:92:
79:6a:a6:2d:49:8b:96:ec:3b:48:d9:f9:41:bd:fb:
6b:e9:30:b5:88:84:ce:f7:4a:12:33:4e:fe:5c:34:
97:99:4e:cd:8d:fc:d1:31:ce:42:6c:58:10:c9:c2:
5e:10:65:da:06:c2:38:86:a4:1b:74:34:ff:a5:e4:
96:cc:e8:f1:db:29:44:1f:74:6e:5f:3e:b5:a6:26:
e1:14:e5:4e:6f:d3:df:97:e3:91:21:28:0b:15:7a:
56:03:56:54:bb:e1:96:fa:e1:a2:59:08:f1:b1:05:
63:35:07:eb:3b:a5:e8:ff:58:21:05:4e:9d:8b:ae:
44:34:86:39:9b:2d:88:c9:d8:54:3b:21:7a:2c:59:
50:25:66:6d:75:47:2a:ab:a2:5e:9a:43:03:bc:35:
a3:95:3c:02:68:84:9f:cb:2d:05:1c:35:43:0d:df:
6f:4a:af:f1:6b:4e:54:72:d5:26:67:9f:25:28:48:
db:2e:61:04:77:6d:7d:11:ee:9a:88:c0:05:f6:7e:
b0:4d:8d:c8:6e:20:50:53:9f:88:dc:d8:81:8f:b3:
08:f7:71:2a:de:85:7c:5b:0c:bc:09:ff:54:b3:d6:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.192.0/20
185.100.0.0/22
193.109.220.0/24
194.110.75.0/24
217.30.80.0/20
IPv6:
2a10:eec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21313
25485
29403
211369
Signature Algorithm: sha256WithRSAEncryption
89:83:b3:e3:a9:29:68:a8:01:25:16:bc:0f:cc:ca:f1:06:f6:
1a:c0:8f:58:21:6a:90:cc:b4:bf:12:ab:3f:b1:00:fb:cb:e3:
3b:b8:1e:d0:dc:1b:4b:b2:30:91:0f:1d:d6:90:e0:0b:8d:97:
a7:69:70:30:01:d7:fa:b7:3b:b7:63:95:06:2b:fa:1f:7d:81:
0a:b3:ca:23:0d:87:05:82:29:95:16:0f:fa:22:a1:9e:4a:6b:
37:d1:7e:8e:85:9f:a8:e0:46:a9:c5:8b:1d:72:9f:83:ad:43:
21:c1:0d:a5:a1:02:23:b7:c2:f4:a4:f2:c0:83:7c:e9:a6:13:
a2:8a:e8:da:3a:98:dc:30:78:83:73:50:68:c8:14:1b:c3:f3:
26:fe:74:18:35:78:db:97:4d:05:0c:a8:bd:e8:cb:62:80:d8:
79:20:05:9b:64:e7:1a:74:41:14:ef:85:7a:07:d8:f9:19:26:
56:1e:c4:0f:33:9e:ef:4a:d1:f9:4b:23:f9:ee:e1:8d:21:43:
65:84:72:da:f6:66:0d:33:4b:39:ba:be:99:3b:99:cc:83:47:
1c:77:98:4f:cf:9b:2b:12:96:f6:f5:03:8d:b8:37:9b:86:ac:
87:cb:78:c2:be:c4:85:2c:69:2c:c3:68:f1:be:a7:0b:d1:6e:
b4:ab:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 20:51:02 2024 by rpki-client on console-fra.rpki-client.org