Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
File: v9P33PxgiR_DiPpcHb118nuVGeI.cer (raw, json)
Hash identifier: Y+LmLSu0Qbqy0aoa9tmIpqzfdYVaHLEcbdoIfjg9PQ8=
Subject key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B5EAFC536BF376B3D5440BF47CEDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42472
IP: 194.1.209.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5e:af:c5:36:bf:37:6b:3d:54:40:bf:47:ce:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:89:f0:00:af:5f:16:3e:ca:0f:03:1b:df:
e9:b8:d9:25:09:11:3e:5a:96:65:e3:58:9e:9b:29:
5b:d2:2a:27:f5:f5:c2:14:e4:ed:bf:7f:21:35:15:
6e:43:78:b3:aa:dc:a4:5c:08:9c:29:ef:50:7c:2a:
1c:2b:67:f6:d1:f3:83:eb:fc:37:59:4f:f0:4a:c3:
ef:c1:3d:65:62:b2:6c:74:73:4a:a0:f4:cb:2e:5c:
2a:0a:cd:57:74:a4:7b:5b:87:86:11:c7:6c:ab:80:
0f:86:c7:c0:f0:72:02:b5:e5:47:91:71:21:ed:0c:
6e:fe:65:17:65:11:70:ea:35:0d:18:4c:8d:e7:99:
6a:3d:32:7d:0c:18:ea:70:bf:67:dc:df:c9:04:ab:
07:50:5f:27:14:00:54:01:06:83:9e:41:99:bc:a9:
2e:9d:10:aa:1f:68:72:8a:0f:bc:39:2b:50:2c:52:
cc:55:2c:b9:6f:65:cd:40:70:de:90:de:ca:36:ca:
6e:7b:31:3f:6c:11:c3:ec:4f:fb:ed:c4:38:32:65:
6f:55:7e:f9:17:31:49:36:b8:5a:81:a3:35:3f:4f:
eb:4b:fb:ba:9f:ca:58:a6:e4:12:0e:b5:b2:2f:a5:
94:19:af:27:f3:79:c6:4b:60:60:43:8c:47:bf:96:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.209.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42472
Signature Algorithm: sha256WithRSAEncryption
4a:84:03:29:39:92:74:1e:54:eb:17:12:55:b8:0b:49:c5:7e:
25:80:93:d4:bf:a5:70:09:b2:95:ec:c4:73:66:50:21:a9:ba:
5f:ab:16:be:86:5b:ea:2d:39:c9:f4:1f:ff:03:99:22:23:e4:
5e:c1:4c:23:b4:a5:15:30:1b:4c:ac:17:d3:be:c7:7d:01:df:
5c:ac:69:2a:91:05:dd:e5:77:1c:0b:55:8b:a7:22:00:8d:a8:
ee:23:a4:d6:a1:c3:14:27:a7:6f:c9:8e:2f:21:f1:04:b8:52:
21:10:4b:d8:01:31:5c:68:9a:89:30:90:7e:3f:f0:54:3d:53:
5f:ef:d4:89:18:3b:15:88:48:c5:fa:85:c8:4f:19:8f:c0:3b:
b7:a5:48:1f:41:00:92:1a:22:ae:31:9d:e1:fc:94:9b:6b:0b:
87:f2:b7:48:41:4f:dd:a1:bc:0e:67:87:54:0c:d0:e2:59:8f:
69:3c:98:b8:4e:c8:b1:03:14:68:e8:dd:23:e9:1a:4e:25:be:
44:e4:b0:de:7a:56:33:0f:12:92:18:93:03:c0:61:af:c5:97:
a9:61:05:cf:af:97:b5:c3:8c:ee:6a:c7:57:fc:cd:31:09:e3:
3f:af:6f:f2:7b:09:5c:ec:e8:77:a4:66:94:b1:9f:39:5c:e4:
e9:36:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:18:19 2024 by rpki-client on console-ams.rpki-client.org