Certificate
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
File: cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer (raw, json)
Hash identifier: rAfANI1q+gq2q0ZMgjuHbN4nxbfI53FxhWXyfBZyj80=
Subject key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 4E3938CA3C5F57208A2E44ED4D98E54504F5C711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Manifest: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
caRepository: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/
Notify URL: https://chloe.sobornost.net/rpki/news.xml
Certificate not before: Tue 22 Oct 2024 11:10:03 +0000
Certificate not after: Wed 23 Oct 2024 11:10:03 +0000
Subordinate resources: IP: inherit
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Oct 2024 20:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:39:38:ca:3c:5f:57:20:8a:2e:44:ed:4d:98:e5:45:04:f5:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Oct 22 11:10:03 2024 GMT
Not After : Oct 23 11:10:03 2024 GMT
Subject: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:07:2d:6d:9c:e4:20:9d:9e:92:3a:f3:4a:
ed:7a:48:c2:07:0b:48:06:0c:57:a4:8c:03:0e:2e:
b8:b5:8d:9a:d3:41:a3:9b:23:d8:bc:df:96:56:fd:
c7:0a:96:46:f2:a9:d6:81:8e:4b:00:83:d2:e4:ac:
c2:7a:ce:1a:77:8c:92:74:c9:3e:dd:43:a1:cf:a2:
ba:4c:b9:9d:a3:5d:f3:93:cf:47:7e:37:f9:05:b1:
28:42:5b:dd:ac:d6:6f:d3:92:49:85:79:33:0a:1e:
cc:5d:d3:4b:51:fe:ae:2e:e1:a0:73:f4:07:4b:d9:
1a:6c:bd:23:10:a6:5d:67:a5:36:04:2f:7a:f5:1a:
3e:a3:a1:2b:e2:2e:07:1f:68:05:7e:00:54:a6:93:
65:68:77:31:0e:11:68:c8:da:dd:13:48:36:76:e7:
9c:39:d5:2f:41:dd:f0:ec:cc:48:16:bf:42:91:ab:
49:8e:dd:53:47:28:fc:e7:5c:94:33:5c:15:35:cb:
08:20:8a:89:79:5e:8c:5c:fb:70:86:8f:a2:cf:a2:
52:28:0a:8e:5e:ce:ba:a0:a3:f4:25:49:0a:27:6d:
26:49:1d:ba:79:d7:19:18:df:85:5a:85:64:d8:f8:
9d:d7:92:f1:fe:ba:3f:47:1c:98:20:68:c3:9a:61:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Key Identifier:
71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Subject Information Access:
CA Repository - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/
RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
Signature Algorithm: sha256WithRSAEncryption
31:6b:04:89:83:76:80:a0:92:51:9b:bb:01:d3:63:5b:ab:64:
b5:80:7b:eb:68:44:63:1c:ed:d5:8a:aa:1f:18:74:11:51:02:
2c:27:cc:23:31:01:61:d2:3b:00:d2:71:3c:29:7b:03:d8:53:
2e:d7:42:65:8c:32:d1:b6:08:ef:d6:36:af:e4:9d:19:f8:ed:
c1:cb:93:d9:83:d9:fc:4f:cf:54:c0:17:41:71:9e:cb:c7:ac:
bf:fb:f4:56:b2:a1:93:b3:63:c1:b2:cc:10:b3:2d:3e:e1:9f:
50:de:24:2c:14:1a:c6:c8:9b:18:36:d3:86:8a:49:1f:00:6e:
5e:40:c4:c9:d8:6c:db:3e:34:57:f6:94:65:7b:33:73:33:0e:
7d:01:9b:22:19:1b:9e:3f:ba:eb:82:1b:42:e4:e8:36:cd:75:
6c:31:4c:a1:50:da:7a:7a:3f:ec:d4:5c:38:c6:5e:fc:16:84:
8f:f8:fe:12:21:f0:d9:73:90:6f:4b:a0:28:f4:b5:ba:d7:3a:
1c:4b:42:8e:0c:2a:89:ef:f0:47:17:c2:e3:94:cb:6d:b0:66:
b9:02:e2:94:53:4f:8c:6f:2f:ce:d6:cb:ad:dc:ea:9d:fe:cb:
ca:8c:0d:aa:92:64:68:20:26:e5:8e:e0:27:47:05:04:da:ad:
df:b2:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:12:48 2024 by rpki-client on console-fra.rpki-client.org