Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.cer (raw, json)
Hash identifier: vQ+hCIqlwomYx92XUx7QF8cSgAUdI4Gb1rvG7vtxSMw=
Subject key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F256877779DC49A426F2DECC5549F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.67.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:25:68:77:77:9d:c4:9a:42:6f:2d:ec:c5:54:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:17:e7:89:55:b6:10:a0:3c:ce:e7:aa:4f:
2e:16:22:d4:ac:61:08:0b:70:b8:6f:7f:ca:c9:bf:
f8:92:4b:6f:b3:56:e0:5e:32:58:80:b8:ff:a7:8f:
2d:31:4e:d6:b1:00:36:07:e3:64:03:af:67:1d:76:
13:36:d4:93:d8:0e:01:87:19:32:52:5d:48:d6:63:
c6:6a:40:f7:59:e6:28:ed:da:80:97:bf:96:cc:b7:
8f:06:fa:93:e8:d5:30:45:5f:8a:5c:c3:07:6a:94:
06:c3:74:d7:0a:70:1c:2f:8c:9b:8e:e8:12:28:c1:
ed:e6:67:d5:82:b0:4f:a0:8a:5a:02:f2:6f:28:ce:
c8:1c:06:bc:4d:84:93:33:9e:bc:26:15:7e:ab:46:
39:6d:9b:fb:74:98:6a:9e:4a:a3:be:7c:f4:59:48:
ed:83:8c:d1:6a:80:a2:6f:50:0b:36:54:aa:19:0f:
72:27:22:ed:f3:53:4a:5b:39:2f:d9:40:50:b6:bf:
0f:e1:ee:2d:1a:fb:7a:f3:49:d8:0b:61:a5:08:07:
8d:56:02:c0:9b:6b:c7:f1:7b:97:55:e1:b2:cb:9e:
56:5f:ee:0c:e4:18:bb:db:c6:66:6a:d6:f7:e5:c0:
53:55:1c:fe:68:fb:33:17:37:7b:64:59:0b:54:0c:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:1d:89:ab:56:c6:65:7f:b4:1e:6b:ea:38:1b:32:dc:cb:cf:
fa:15:e8:57:06:86:34:ce:55:d0:d5:e5:e0:0d:d3:f9:74:69:
5d:c8:fb:f5:03:f2:eb:9d:ec:c2:e1:bb:9b:8c:e8:82:e1:51:
61:a7:24:c9:c3:1d:a8:51:a2:8f:b6:17:c1:37:07:38:5f:ec:
9a:d2:11:52:19:e0:35:7a:17:5f:15:e5:48:9a:72:25:8c:16:
21:b2:d6:49:21:05:91:e0:b5:3a:4f:5e:90:0a:88:65:40:1f:
b8:a9:77:80:d2:1b:2f:0f:4b:b7:02:3e:ab:dc:da:a9:06:a5:
62:25:e4:b0:c4:df:ce:28:be:57:d3:9a:8b:ff:31:20:5e:99:
9a:4e:6e:1c:0f:08:42:de:72:39:13:48:59:23:b6:dd:96:19:
0a:ca:91:64:06:f3:f5:6f:cc:5e:35:8d:5d:78:8f:78:de:6e:
99:52:e3:e1:a1:e3:34:85:5a:84:7e:86:fc:69:46:ac:23:3b:
6d:0f:bb:e2:ca:aa:9a:8a:74:83:e2:98:51:96:b1:48:0a:ee:
9d:23:7f:d6:3e:dd:24:90:df:b4:e7:1e:e0:ec:5f:aa:4d:17:
7e:24:20:13:15:7a:a8:ff:9d:1d:4a:1b:6d:48:26:c8:de:c7:
82:78:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:35:21 2024 by rpki-client on console-ams.rpki-client.org