Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
File: tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer (raw, json)
Hash identifier: pLmePTmSncS5K+MD3hcngTbcJb64/UKbh8bfanByzJY=
Subject key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8E24FBE83A34686C2D160C1D9F61A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57506
IP: 185.139.88.0/22
IP: 2a00:c540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e2:4f:be:83:a3:46:86:c2:d1:60:c1:d9:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:02:99:08:43:39:d0:4a:b5:6e:cd:61:fa:
4a:3b:54:49:82:92:72:82:d2:36:39:ca:2d:b5:2d:
2e:73:d0:e4:f7:2f:f4:cb:a6:2c:26:b5:e4:04:aa:
8b:b2:ef:e9:9a:36:c4:b1:db:52:86:3e:f7:35:dc:
14:7b:79:b7:da:98:74:be:59:90:aa:b7:a9:05:08:
5f:b9:31:8a:cc:06:58:bb:92:38:a0:94:50:c1:39:
34:3f:42:d7:b3:fb:d6:d7:23:93:fc:73:df:96:43:
f3:bc:13:7e:45:87:ba:ba:d5:22:0e:93:06:0d:3f:
4c:87:e1:e3:75:3f:2d:4a:82:22:bf:5a:8a:61:d3:
60:38:fa:6c:04:a2:40:9f:be:1b:d3:3d:27:d1:a9:
46:02:4a:eb:ea:90:3f:e8:5d:5b:f0:b9:0f:ad:41:
ed:a4:bc:12:f7:8e:7a:34:84:ea:91:9b:33:64:ed:
36:fa:ce:f9:7e:f7:0a:99:14:cd:a6:33:ef:8e:27:
d7:21:88:21:8b:ff:75:ff:a5:c2:18:40:10:47:b0:
ab:a4:20:78:67:06:59:3a:4b:40:14:a9:80:83:c6:
91:6e:6a:13:ce:e6:42:b9:a4:28:0d:09:a2:d9:70:
20:cf:3a:42:00:3d:a2:0b:51:aa:1e:30:1d:a2:76:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.88.0/22
IPv6:
2a00:c540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57506
Signature Algorithm: sha256WithRSAEncryption
6f:c2:96:bb:33:79:7c:ac:26:c5:ab:36:e4:b9:c4:59:5b:72:
29:f5:db:87:68:1e:3b:26:1e:d3:98:93:34:0d:f6:f7:ce:9a:
f9:71:e1:1c:58:8a:76:59:1c:d9:e8:2c:41:47:20:d7:9f:e7:
8d:1d:8e:30:d6:26:14:eb:6d:68:8c:14:6e:28:9d:d2:ff:9e:
d0:24:00:2c:e5:0d:ec:30:e9:7d:08:af:53:28:90:bf:a9:55:
3d:79:c9:3b:87:0b:ee:b6:23:d4:80:f0:2a:35:c7:85:1b:a6:
62:ea:11:a0:4c:25:2c:8d:4a:62:ad:15:d0:ea:39:3b:29:83:
6d:1c:94:55:8d:90:fd:d1:95:db:ae:de:19:07:6c:ba:b9:5d:
aa:ca:8a:d2:cb:dd:35:bb:1d:9d:80:4e:e2:6e:c3:14:e5:97:
3e:88:e6:98:e6:07:73:19:4f:49:64:76:b1:75:44:34:e8:3c:
e2:57:a0:92:d0:f9:3f:a9:98:f1:fd:db:57:dd:1f:a5:56:77:
eb:cf:28:d1:02:33:6d:3a:9c:72:c9:93:b0:2d:94:c8:52:6f:
e7:66:d1:be:90:10:0e:f8:d8:7e:87:c4:71:3b:9d:bc:8d:e6:
84:a4:b1:ea:3c:a0:63:e4:22:c4:21:64:c0:ae:f3:63:e0:55:
09:95:10:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:33:00 2024 by rpki-client on console-ams.rpki-client.org