Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
File: 03fcZqVjo68h7gerM-i__nr5KI4.cer (raw, json)
Hash identifier: knPB4sDKC2BSuc8wu4ZTce6AQampCVxYenoNIdDma1U=
Subject key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019001E1414CD01380F02D0FC7501DDCF3A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Jun 2024 11:20:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 146.19.165.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:e1:41:4c:d0:13:80:f0:2d:0f:c7:50:1d:dc:f3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 11:20:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:8a:96:89:c2:8b:79:64:db:ea:42:3e:49:
4c:29:f3:ad:96:bb:58:b4:6d:3f:98:cd:90:d8:cc:
d0:01:e8:08:aa:38:77:aa:03:d2:16:99:a2:64:14:
b4:a3:87:21:b4:ec:23:43:81:08:36:5a:6d:03:91:
c7:6c:c7:bf:02:a8:5c:31:c3:2a:0d:72:c3:49:17:
16:86:b9:fb:b9:94:a7:8f:f7:e4:1b:14:d4:ba:9c:
38:05:cd:ff:97:b6:69:55:74:f3:ba:45:6d:1e:37:
f7:4b:0e:cb:85:fd:38:0b:32:ef:7c:14:de:05:13:
a1:a0:5b:2d:e3:22:43:31:11:49:cc:56:b6:a6:ed:
87:e2:fb:90:a1:22:4b:34:41:7b:ba:db:f2:e8:f4:
82:30:c6:52:11:75:e8:97:18:61:71:5b:33:a8:5e:
5e:a0:ab:4a:18:3b:91:65:e0:b5:b1:76:2a:00:08:
d1:3d:27:8e:2e:d9:aa:ca:6f:47:f5:70:4d:c1:59:
44:b8:65:dc:fd:45:32:a0:fa:e8:f1:fb:e1:df:b5:
f6:dc:df:2e:81:ed:26:2b:9d:59:82:21:89:e5:08:
e1:bd:bf:1c:bf:ae:5e:47:f2:07:6a:c9:89:0f:58:
a8:15:de:33:a2:f7:36:0d:e6:70:9d:e7:43:38:a5:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.165.0/24
Signature Algorithm: sha256WithRSAEncryption
80:de:6e:cb:9b:03:2f:6f:59:14:8b:a3:b4:69:2f:46:0b:5b:
47:42:61:13:83:9d:5a:58:c7:ee:6c:d9:c6:e7:d5:8b:0c:3b:
49:4f:74:ac:82:7a:66:8d:46:22:75:e4:9a:6e:36:e3:83:c8:
b6:16:1d:2d:ae:2d:7b:b5:66:06:17:19:ce:d8:0d:a5:ed:32:
9d:be:3c:df:0d:39:0f:0e:68:a4:4a:3a:09:f3:15:ef:c0:76:
ab:99:ca:8c:a4:5c:3c:ff:ba:86:e4:6b:03:df:22:d1:66:ab:
25:dd:9b:30:3a:2e:2b:6c:eb:83:72:c9:5a:25:7f:54:f6:cf:
93:da:b0:28:a0:60:6c:c8:01:6d:f3:7f:3c:0d:0f:e7:ab:f7:
4d:89:95:eb:77:4c:16:90:c8:06:cc:42:3d:db:4e:37:7e:bc:
fb:49:80:4f:9b:2b:a5:c5:a1:b8:f4:f0:b9:fb:fb:8d:b0:2a:
1e:d1:a5:10:88:22:da:2c:f8:bb:6d:41:99:3a:15:2f:c3:a2:
95:86:0d:61:a0:31:ec:60:bc:b1:fa:3b:70:ca:3b:1b:6b:2d:
64:40:c6:7a:e4:0d:85:e6:c7:fe:67:23:be:0b:23:c9:9d:b0:
42:5d:48:48:78:b4:91:ef:a6:07:f1:bb:b2:4d:58:fa:52:05:
0d:47:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 12:03:10 2024 by rpki-client on console-fra.rpki-client.org