Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.cer (raw, json)
Hash identifier: SL7CzYUurd5zEnZEeNyT9x3BdoLfntS5ixBT+3P0kas=
Subject key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E2FB0FFA545267C4A4FC6549B8DAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201939
IP: 185.57.52.0/22
IP: 2a02:5820::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2f:b0:ff:a5:45:26:7c:4a:4f:c6:54:9b:8d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:73:79:fa:82:f2:fe:37:08:86:11:d2:4c:
ff:b7:f5:e7:49:ff:79:89:19:0b:87:25:23:92:4b:
f8:7e:ec:34:eb:ea:35:2e:6b:a3:53:a1:a8:bb:25:
de:e6:14:0b:10:6c:50:ed:df:da:c8:d0:2d:92:62:
06:ee:d8:de:4e:dc:a6:0e:4a:d9:62:83:73:14:1e:
45:7b:d8:ed:24:21:a1:e3:c7:d7:f4:67:50:28:14:
51:f4:0b:c5:b8:a0:da:0d:ee:68:5f:67:81:00:58:
4f:77:03:3a:3b:a4:7d:d1:45:70:c7:72:9b:51:49:
d7:84:97:62:3f:c6:ca:3e:0a:15:78:17:75:8b:f1:
72:0f:bb:7f:44:bc:ef:e7:dd:06:67:3b:a7:5f:f3:
85:90:08:57:af:a9:4a:99:f3:75:70:91:1a:b4:13:
ef:63:62:15:41:67:86:89:29:a4:28:75:86:8b:fb:
76:0c:e3:77:97:86:44:38:8e:70:fb:0c:1b:a4:74:
16:52:80:21:31:47:11:2b:1e:e6:4c:f3:ef:d6:10:
08:21:eb:4f:83:f8:23:20:22:ba:a2:84:b1:28:57:
0d:8f:40:71:c2:2c:73:d0:5b:c1:de:e0:54:d7:67:
ed:37:cf:99:cb:13:3e:c2:ae:da:bc:0b:40:ae:83:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.52.0/22
IPv6:
2a02:5820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201939
Signature Algorithm: sha256WithRSAEncryption
42:95:13:b2:65:b9:9d:2d:f8:cf:3e:29:d0:86:31:94:d3:e5:
64:44:ff:0d:cc:82:7a:cb:46:d5:c3:c2:f4:e1:d7:11:6f:b6:
9a:1a:1d:5e:6b:82:d6:bb:a9:54:0d:58:c0:6c:e9:97:39:c1:
e6:cd:3f:e3:c8:4d:6d:b1:20:23:e3:65:8d:7e:45:08:1c:b4:
3d:54:13:0a:54:ab:77:3b:a1:39:f8:ab:f5:76:7d:66:05:9c:
b3:4a:76:d5:c2:8c:bd:6d:94:96:ff:aa:7b:63:f7:97:cd:a8:
67:c1:94:cd:20:4f:60:4b:bf:cf:7b:b8:75:76:10:81:7b:36:
7c:9e:a0:5a:39:b6:60:19:a8:b3:41:d1:73:ea:34:35:0b:b9:
05:c8:30:9c:f5:03:64:bc:49:9b:6f:d6:bc:f1:26:0b:ea:0d:
87:59:29:c7:82:45:d6:eb:2f:c0:ef:d9:0f:6a:c0:f3:6b:37:
a3:cc:29:23:7a:9e:8f:5a:2f:37:54:e0:64:55:02:fb:55:c9:
57:79:f9:47:6b:d8:6f:73:53:4c:4f:ad:51:d1:16:ba:f5:fc:
e7:4d:49:8d:45:fe:ba:60:a9:e8:aa:6e:61:fe:06:22:73:2e:
99:fd:f9:df:2a:d4:e9:7c:8c:b9:b1:30:d4:14:2b:c0:1a:77:
94:e1:c5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:35 2024 by rpki-client on console-fra.rpki-client.org