Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
File: 12UrrkezA7urED_3ukWgqQYMPcw.cer (raw, json)
Hash identifier: k9BRUDiBDHgEgj3F3CWpCT7kzZUcVPStBL7bQcRa+Qs=
Subject key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB174BB9E68B224DC23E855398A1C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.213.153.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:17:4b:b9:e6:8b:22:4d:c2:3e:85:53:98:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:5a:17:08:ae:11:be:a6:5e:f0:05:78:f4:
2f:ec:84:56:55:0a:9a:b6:64:28:86:bf:65:4d:70:
44:de:ee:57:28:ca:38:44:52:3a:7b:55:46:a1:85:
92:56:d1:54:a5:03:9c:47:b3:01:23:2f:8a:6b:2c:
58:d8:f4:9a:58:d7:72:0e:b3:45:95:67:3d:3c:60:
a6:0a:a1:ad:b5:2f:a6:d2:fd:5a:a3:eb:f9:47:cd:
59:f4:ed:57:50:35:5a:40:9b:6c:bd:c1:c0:c6:8f:
a5:52:38:b1:df:3d:c0:f6:e6:01:d2:e0:6e:df:fd:
5a:35:d8:22:50:85:82:54:66:bb:54:69:8e:3a:2f:
b7:37:82:94:7b:a8:3a:f7:ed:2e:ab:2c:81:50:42:
5f:d8:a6:44:20:b8:9c:01:57:f0:7e:5a:7d:1c:3d:
64:12:17:07:de:f2:b1:14:7a:c1:9f:04:38:85:98:
35:0f:e0:73:e0:54:d2:39:05:94:10:d4:6f:bd:83:
7f:97:ce:34:96:c1:bc:89:13:9f:b1:9e:e1:44:a4:
21:c8:2d:cd:29:b3:f7:c3:38:5e:c1:ab:ed:0c:ac:
bb:40:66:21:b4:0c:57:52:1e:2e:0c:81:ea:b0:c1:
01:3c:6e:6d:74:fb:7e:f8:34:b6:95:1f:9b:bb:f0:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:18:9d:e6:7a:61:c6:86:87:ac:02:4a:dd:c0:0e:39:8a:4b:
b9:bc:91:d6:2a:37:a1:ac:5b:0a:48:54:5e:fb:1a:c6:56:54:
2c:51:f9:be:44:38:84:51:78:40:40:38:a5:17:ad:53:9d:36:
18:e8:be:b2:59:08:dd:53:12:fd:2b:73:86:48:03:9f:9f:8e:
97:4c:e8:ba:60:fb:2c:71:ba:30:b0:41:13:a8:d9:7f:03:58:
e9:e5:c1:93:55:ac:40:28:a1:5d:62:78:13:93:3a:08:10:2f:
c3:04:52:0a:91:ab:e0:2a:02:7a:fe:88:1b:a2:aa:c9:57:91:
2f:ce:f0:7c:31:ce:02:2d:77:e9:04:93:41:28:9e:39:79:4c:
4d:ea:46:d6:cc:31:72:60:14:1a:34:5f:64:5b:07:8c:f5:84:
19:71:7e:93:25:e4:a6:ea:c2:79:ac:19:15:e6:7a:3a:e7:f7:
71:79:10:f4:e3:91:ab:b0:cf:7b:1b:41:d7:ab:9b:90:72:23:
68:d7:16:72:04:1c:05:18:2e:51:db:a4:2b:9f:92:d9:f7:bf:
d4:11:69:bd:44:84:20:44:1f:41:64:79:d0:59:c4:e1:f9:24:
8c:af:21:00:a4:40:11:0f:63:17:bd:db:fd:2c:ff:b0:6d:03:
58:61:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 19:55:29 2024 by rpki-client on console-fra.rpki-client.org