Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.cer (raw, json)
Hash identifier: jGCi3MkWIbbf834kuzvo1tut7zgbx2jANnEk37z0DGM=
Subject key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72590093B1606563F3716E5BA9C0524
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199697
IP: 193.37.158.0/24
IP: 2a12:6040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:90:09:3b:16:06:56:3f:37:16:e5:ba:9c:05:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:0a:cc:5a:b5:46:16:86:45:23:fd:52:80:
97:90:ae:a4:5d:1b:88:ff:2c:e9:f3:8a:95:09:0e:
0a:d3:a7:de:72:59:1e:56:54:8e:84:a3:c8:34:41:
c3:71:fd:47:15:98:0e:e8:13:a4:28:a9:74:bc:05:
15:29:2d:27:26:32:6b:a5:4d:74:15:c6:42:cf:bb:
c2:31:ba:3f:87:ec:ac:a2:9e:20:f5:32:49:f3:03:
cf:a9:9d:00:84:85:5f:a3:d7:d7:59:49:d9:81:1c:
f9:9f:04:36:7d:2f:49:56:d4:30:89:c8:35:b1:8f:
93:cd:ce:f4:42:64:89:d9:fa:bf:5e:c6:da:a0:26:
de:c8:12:e3:04:9e:b1:8d:ba:ab:b8:9a:61:ac:b1:
21:d8:9c:1b:b2:4a:69:6a:f6:0e:94:ba:e1:c7:d0:
a5:45:38:20:d5:2f:1a:a2:2a:ff:59:c7:b7:a7:f8:
26:4d:4a:34:f0:e9:2e:05:a2:e4:62:c4:7d:22:0d:
c5:62:d7:a9:55:3d:87:65:e0:af:e4:eb:12:ee:e5:
71:ce:08:83:26:c9:13:3f:7c:a3:75:fb:e6:f1:14:
a9:ca:e2:c0:6b:9e:20:2b:55:7b:6c:58:b0:7a:e6:
39:5a:3d:d4:51:f5:10:eb:c7:5a:7f:4e:b0:b8:22:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.158.0/24
IPv6:
2a12:6040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199697
Signature Algorithm: sha256WithRSAEncryption
17:63:0b:47:91:bb:e4:0b:30:1b:f7:3c:a0:55:ac:1a:9c:dd:
a8:23:34:62:a0:bd:9d:72:1b:d2:a8:60:69:f8:87:a4:3c:69:
8a:b3:37:49:e2:9f:32:80:57:e4:ad:2d:a5:c6:c4:f1:b7:1c:
a5:be:07:7e:45:cf:9a:a8:73:1a:5b:fc:80:ae:1e:46:5c:01:
10:01:4a:ee:55:61:52:08:75:1c:58:b9:42:91:55:06:ab:06:
80:21:a0:23:c5:cb:ea:5e:96:a3:69:ae:80:59:19:72:58:58:
70:e3:22:54:bf:9b:58:cb:22:ea:95:1a:d0:a6:5c:ee:94:e9:
c1:17:1f:f8:ca:9b:d6:3c:b6:72:2b:4f:ef:31:ac:89:ad:fc:
c1:f5:b3:01:d4:87:c7:80:52:98:b4:75:f8:6e:27:5a:cc:03:
51:97:de:df:14:b7:0a:83:07:40:55:d3:1f:5c:d2:aa:ca:80:
d6:f0:53:fd:bc:16:be:49:2b:c1:af:3d:75:40:aa:a7:a3:af:
61:b2:5e:b2:1f:0b:00:04:a9:a1:09:85:95:bc:3b:25:24:b1:
4f:88:a0:38:09:d0:2d:ad:e2:53:c6:11:22:56:3d:07:d5:d9:
9c:da:75:6f:f6:55:17:b8:8d:d9:fa:d1:a2:8c:d4:38:bd:b6:
ed:f3:5f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:23:46 2024 by rpki-client on console-fra.rpki-client.org