Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
File: totCki04fFePpXaSSH8qGQaFibo.cer (raw, json)
Hash identifier: Zektj6N7LdzqrN2e0G7AVBXZwq7eqLW+HCKR3WrWQjA=
Subject key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D455456694F0442D2BE8D0CB7DAF55401
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jan 2024 10:32:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209582
IP: 188.190.108.0/22
IP: 2a0d:d1c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:54:56:69:4f:04:42:d2:be:8d:0c:b7:da:f5:54:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b68b42922d387c578fa57692487f2a19068589ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:77:3f:f0:8a:4c:a1:b4:6f:a3:1f:9a:11:
8a:14:04:75:1b:da:1b:ae:06:44:06:34:c2:b1:52:
1d:f8:c1:b0:66:47:e2:18:08:89:8b:51:78:a0:e3:
c4:96:d2:98:91:32:24:fe:8e:6d:77:fe:e9:fc:e6:
03:57:31:6a:08:a8:df:79:a4:86:5f:bb:05:ef:f3:
5e:19:a7:c7:03:44:9c:c0:23:64:62:24:03:e0:95:
22:75:cc:ce:d8:46:66:0d:76:9e:88:ee:64:43:10:
4c:77:ed:cb:8d:0d:98:a2:6e:6a:7f:bf:30:96:b2:
81:fc:e6:79:5d:fe:9f:08:9c:52:09:48:58:86:03:
9c:53:4c:99:7e:69:59:18:94:33:7d:2e:bb:89:b0:
9c:14:69:9d:b4:d4:fd:be:92:db:af:ba:0e:7b:cb:
93:68:15:1c:ed:9e:49:3c:60:17:32:d6:c2:25:8a:
5c:78:53:25:ea:6a:bb:15:d7:dd:c9:9f:61:c7:83:
99:da:f0:c2:db:81:5a:26:7b:13:1d:9e:f3:8e:9a:
f0:49:ba:47:e6:88:3c:36:6c:d8:d9:69:f7:67:c0:
26:f9:4c:9e:d1:39:ed:3d:c7:c8:89:7b:12:f5:f9:
e7:54:2d:50:ba:5a:09:2e:2d:b5:5d:14:86:7e:50:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.108.0/22
IPv6:
2a0d:d1c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209582
Signature Algorithm: sha256WithRSAEncryption
08:fd:ea:25:ed:58:06:7f:8d:cb:9b:b8:7b:c3:9c:51:9a:b3:
cd:b5:fd:69:3f:1b:be:37:f1:77:b2:56:d8:d6:ba:2b:03:bc:
6b:4c:9f:64:96:f7:90:d1:74:f6:43:39:25:07:fc:ae:42:b0:
2f:01:49:ca:27:5e:b3:75:51:c7:8e:0f:6f:25:b9:0a:5f:42:
28:97:0c:40:91:84:ed:c0:dd:0f:60:5c:eb:81:b1:a7:00:3b:
7f:8d:1a:0f:fe:c7:84:be:b3:20:87:1d:a4:3e:ba:e4:52:96:
06:e7:4c:66:70:73:d7:d2:1d:69:b0:3d:89:57:ef:8f:44:f9:
af:02:6e:f0:87:05:d6:7c:cc:e0:8f:35:48:a2:ca:29:69:ea:
34:5c:29:ad:73:33:66:25:c3:0a:e7:f6:a3:3f:c6:49:d8:35:
61:f2:af:df:1a:67:d9:5e:d8:92:9b:06:b0:5f:8e:f3:44:be:
de:a2:11:5b:fe:00:00:4e:7b:d7:76:5a:77:5e:67:65:35:23:
78:8e:1a:e3:9e:75:c1:e4:61:d1:3e:1c:84:c0:9a:7e:13:77:
65:6c:64:f7:e3:82:7e:87:f7:7c:47:af:a5:5c:bf:5d:a9:68:
b0:c7:0c:23:23:5a:0f:20:d1:c6:37:61:11:46:3a:0f:26:d6:
72:80:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:30 2024 by rpki-client on console-ams.rpki-client.org