Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
File: 06v49M34ljoYLaDN-QjDhEf6egk.cer (raw, json)
Hash identifier: UPxhOjMoHwC4+1gJmZARr+ZnIBDTOzUbOww7CNWtEXc=
Subject key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190B53B5712F53E3B87373D17B719050B28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Jul 2024 07:11:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.146.216.0/22
IP: 2a07:52c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:3b:57:12:f5:3e:3b:87:37:3d:17:b7:19:05:0b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 15 07:11:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d8:10:05:4d:28:e5:5c:9d:4a:20:1a:61:eb:
e9:99:47:1e:a7:52:a5:33:69:19:5d:1c:33:72:a8:
bc:80:21:ff:f7:76:15:6f:5b:1b:4c:5c:8f:34:61:
35:dd:f2:b2:05:cb:e2:0c:c1:da:dc:b8:e4:b4:de:
da:8b:a7:a5:71:31:dc:76:34:60:96:28:7f:d5:08:
2e:b2:3f:43:2c:9b:67:9b:49:f4:6d:a6:b9:01:ed:
94:3b:7d:db:f2:1c:d0:8e:0a:01:2e:f7:49:9b:6e:
8f:8b:09:69:80:ee:4c:86:6e:50:a9:3c:cf:11:0c:
e4:f1:28:17:e4:fb:a9:cf:8c:9b:58:b6:1c:0d:fd:
81:3a:80:f4:c1:d8:44:fd:be:32:b9:15:08:92:04:
ed:41:74:58:49:67:d5:db:7e:ff:73:95:b4:cd:3e:
c2:b0:65:57:86:1f:b0:07:ca:76:56:31:21:18:d1:
1f:3a:17:eb:79:95:13:e4:51:7d:24:0b:1e:6e:e9:
e5:3c:7e:c9:ae:ab:3c:b9:93:b2:f4:54:4a:2e:44:
a1:c7:ad:db:a4:33:22:18:a6:a7:7e:76:ed:3d:74:
0b:9f:12:4f:87:62:3c:2b:d2:c5:1b:53:cc:e4:9e:
91:8e:08:68:cd:f1:88:15:3e:5a:5d:7c:c4:b2:81:
53:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.216.0/22
IPv6:
2a07:52c0::/29
Signature Algorithm: sha256WithRSAEncryption
20:43:bb:47:b9:56:f7:ed:0b:58:09:08:67:09:22:04:98:cd:
7e:23:8f:f7:6b:13:e2:28:2b:88:7d:3f:8c:4b:c7:70:d6:95:
6a:f1:7b:fd:b4:b5:d3:bd:ac:67:f8:a7:13:d4:f5:59:c0:f6:
f2:1a:50:9a:ef:26:34:02:ec:2a:5e:a3:b4:9f:b6:3e:8d:6f:
eb:2d:23:4a:55:84:87:d6:f2:c5:04:cb:fc:c2:b9:99:43:40:
7d:c9:be:14:c3:ce:46:79:2f:41:88:97:86:cb:bc:f8:3f:45:
04:46:4b:4c:97:63:f4:8d:f2:4b:90:81:c1:dc:35:8c:27:27:
b1:32:d8:3b:79:6d:cc:a3:b0:e6:a7:06:ed:21:4b:66:29:f7:
f5:eb:1c:18:67:f0:d8:d2:69:b6:f4:77:33:e5:f7:db:4f:f7:
c3:29:54:4b:98:b4:6d:a8:ee:77:54:32:fb:03:7d:d2:bc:a6:
dd:9a:cc:e6:83:1a:c7:d3:8e:bb:65:6c:2a:08:3e:fe:67:93:
11:77:9f:12:00:7b:1e:cc:74:45:32:f0:95:23:93:66:cf:a2:
a1:76:f7:2f:17:c1:24:bf:e7:f4:c2:e2:3a:9f:2a:65:3f:77:
ef:37:fd:7c:0b:39:27:21:8f:19:90:d6:9b:25:5b:92:5d:29:
cf:6f:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:48:44 2024 by rpki-client on console-fra.rpki-client.org