Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.cer (raw, json)
Hash identifier: OLWChruNHsegUjihmVlhhA8srPLWsF3F7ykjMvOHuxw=
Subject key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6AD0EA885A102A2B149F734F35D85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 139.6.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ad:0e:a8:85:a1:02:a2:b1:49:f7:34:f3:5d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:64:d4:f3:fe:a1:4c:dc:d8:cc:f9:b4:10:
8a:e5:1c:eb:aa:57:74:76:43:5b:30:0a:81:f9:5c:
d3:c6:98:d3:3a:70:72:9b:44:e9:7c:35:a9:6f:0a:
b9:69:dc:90:ff:8f:e3:bc:fd:94:9f:20:6a:7e:03:
29:9a:93:8a:c7:70:84:57:b9:d5:00:fa:6f:31:19:
40:26:f3:c9:75:ff:8e:d1:af:7e:96:d9:35:05:9c:
91:62:0e:14:be:b7:b2:07:63:23:a5:36:04:28:0e:
65:03:80:f1:a1:06:67:46:80:3f:a9:15:c5:af:30:
56:aa:99:e5:37:dd:95:f6:fe:88:a1:19:c8:36:40:
a6:2d:41:45:2a:fe:a6:df:2f:d9:8b:d0:6a:7f:15:
cf:7a:a5:ce:51:97:0a:4c:d5:4a:ae:7e:fa:e1:dd:
d2:4a:53:20:b7:72:50:c0:5e:e4:02:29:b9:a1:2e:
3b:60:0a:7e:d3:fb:69:b5:f3:e4:a8:be:22:bf:8b:
93:5a:00:5c:8b:41:5e:43:31:7f:46:53:f8:3e:f5:
a1:a7:05:41:a4:99:e8:40:df:46:6f:85:f1:d8:f7:
b1:6f:1e:8b:4f:0a:8d:4e:f7:9c:23:ff:47:bf:f2:
5e:ab:78:53:b5:11:7b:3f:de:e1:3e:0b:56:6a:3a:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:ac:45:bd:f3:19:50:42:fa:d8:db:f5:b0:8e:83:21:64:aa:
4f:03:a0:73:29:67:1c:dc:2b:ef:bb:e7:b0:fe:b4:ea:28:ff:
f2:2f:0b:ef:41:62:5e:87:8c:16:01:19:4c:59:84:68:e0:c1:
13:01:72:44:05:f0:43:6c:08:f3:c1:ac:82:0d:88:a0:90:1b:
00:06:0c:28:27:00:7c:a2:85:64:e9:86:46:a1:87:34:88:ff:
1c:8d:97:7d:67:54:34:67:01:e1:4a:de:ac:77:a4:42:c1:3e:
32:3d:8d:c5:e8:58:30:52:63:f2:c8:38:70:3f:e3:3b:9a:9f:
23:73:b0:0b:5a:2a:ad:35:e0:a0:d8:73:96:45:e2:3a:fb:86:
67:55:23:6d:30:6f:d4:3e:e8:9a:a3:95:86:85:8f:0e:b6:06:
96:1c:3f:61:8c:a9:81:9c:6d:e5:63:09:4a:fa:ab:59:22:82:
b8:19:12:32:b5:da:da:db:9c:69:ba:f3:e9:db:7c:95:54:2a:
f6:cf:37:f3:3b:6b:cd:9c:73:24:38:cc:7e:57:93:01:c1:a1:
4e:15:5d:1d:25:93:be:45:57:27:5c:da:f7:c8:9f:95:e1:cb:
bb:3d:00:6d:2d:cc:0b:cf:f7:19:d1:d8:05:ca:66:05:cc:02:
e0:2a:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:40:00 2024 by rpki-client on console-fra.rpki-client.org