Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.cer (raw, json)
Hash identifier: dEg1SouoGrGADNGbAaIfchx+GDcHVylhCo+VYDhuBb0=
Subject key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A57891DBCB53EEFF0F483A873DC60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.148.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:57:89:1d:bc:b5:3e:ef:f0:f4:83:a8:73:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:b0:e6:c7:35:30:eb:ba:a4:16:21:dd:9b:
fc:17:1d:18:bb:8b:6c:3a:9e:e4:19:61:d7:c2:e3:
16:29:43:6c:c3:d2:f2:ea:d9:90:bd:fb:66:bf:67:
95:ff:f5:b8:50:68:fa:c9:ea:c1:52:c7:44:81:d0:
c4:f5:25:ca:d2:ce:9e:d0:3e:c0:e1:eb:a6:78:04:
00:5c:6c:70:ac:62:ec:b0:51:ff:64:6e:98:dd:8b:
8c:39:b4:4b:29:cf:04:4f:7b:e2:72:51:f5:b6:03:
e3:79:f9:ca:90:e9:8a:f7:d6:c5:6c:65:ef:bb:b6:
32:1a:59:fb:83:cd:4b:9f:c5:21:9c:bc:3f:e3:50:
cd:f6:ac:3c:2f:be:85:54:c7:15:61:50:36:a5:37:
e1:61:1d:bc:c8:79:18:7c:85:70:25:1f:07:b3:bf:
f0:b4:67:e9:96:ec:9b:d4:7d:4a:1d:b4:1d:9f:6f:
a6:27:c2:a4:b3:12:5f:42:f1:96:01:0a:62:b3:57:
5a:0d:7d:9a:37:0e:f3:97:d7:05:01:89:46:a9:f6:
e7:56:e1:10:50:bd:17:11:ca:71:9a:09:35:70:ae:
a3:b8:6a:62:ab:a5:65:d8:b9:7b:7d:d5:81:6b:ec:
b2:6f:5c:5e:c3:c5:07:31:40:9c:ce:00:2c:98:53:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.88.0/22
Signature Algorithm: sha256WithRSAEncryption
46:12:b8:d8:85:70:a5:05:d1:a3:1a:6a:e3:ab:bb:3c:1e:48:
62:3c:66:6c:fa:bf:c1:5b:1e:ca:0a:e8:2d:cf:7a:2a:e2:c3:
1a:1e:0f:4c:79:80:83:05:2c:67:b2:fa:02:02:07:45:21:de:
9d:84:33:ca:70:90:88:02:f7:45:bb:d2:fd:d4:1c:08:f0:27:
d3:c3:92:35:84:fe:96:90:3f:3a:15:b1:a3:af:14:86:8b:3f:
34:75:13:47:eb:bb:bd:b6:1d:80:b7:58:9d:89:ee:cb:79:6e:
45:cf:d6:e3:95:04:c9:4e:fa:56:4e:3a:89:a0:29:7c:16:8a:
c9:7e:4e:1b:0c:53:ef:14:a6:d8:63:1c:d4:0d:b7:2b:cb:c4:
fe:a1:0d:ae:6e:46:63:45:88:4b:92:c2:87:02:c1:24:ff:fe:
77:b1:3e:41:81:e5:d0:dc:0d:2a:ba:8d:ed:44:f0:8a:48:9a:
2c:31:18:10:dc:0f:9a:99:c9:3c:58:c3:41:ee:e0:de:8a:d0:
3d:f6:a8:47:cc:93:0a:fa:f9:75:97:27:6b:b1:bb:97:72:1f:
75:02:5f:6d:53:59:66:71:d4:9f:5b:cb:9c:ad:8d:65:89:de:
02:c6:22:9f:33:6f:52:02:ba:82:af:6e:83:95:e0:d7:c8:eb:
c3:f1:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:48:44 2024 by rpki-client on console-fra.rpki-client.org