Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
File: 0fbkNwERz7-WhASFQie4CShRRQ0.cer (raw, json)
Hash identifier: /MH0EnhOcgr7XnSy9dHJueB19n0mdgAzRalDlWyyhYA=
Subject key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC802E3DC7F1858FC75929DAB89B71A2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:31:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.1.184.0/21
IP: 185.21.0.0/22
IP: 2a00:4ba0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e3:dc:7f:18:58:fc:75:92:9d:ab:89:b7:1a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1f6e4370111cfbf968404854227b8092851450d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:1a:cf:1f:5d:c8:d9:1d:3b:5a:43:03:94:
5c:3c:6a:ad:35:4c:b4:0e:3e:d8:24:6a:4c:42:bb:
55:77:a5:15:fe:1f:4f:67:55:02:6c:c2:90:cb:75:
3d:5e:8f:2e:66:36:6d:6a:2d:94:b0:2f:a7:0a:88:
4a:8d:05:e3:6a:4b:ac:d6:b5:fd:5e:22:72:8d:91:
7a:f9:05:77:eb:70:b8:72:4c:a2:86:e9:91:bd:25:
8b:06:aa:8a:dd:91:7a:7b:ca:22:36:6f:db:7a:d9:
df:51:6c:ea:fb:74:d1:fc:fe:72:fc:e7:23:b2:9b:
86:59:0c:0c:b4:ff:90:82:16:68:d6:07:29:fd:c7:
23:e9:9f:73:db:9d:bb:bc:2f:fc:ec:7e:74:9a:73:
24:f1:4b:16:2d:b1:45:b2:cf:7d:ad:ca:76:96:aa:
d4:2c:f6:44:05:8b:c5:bc:19:92:16:9a:d7:39:7c:
92:fc:f6:de:0b:ac:d3:dc:da:48:37:45:ce:18:a9:
72:2f:2f:02:fc:7a:95:20:41:0c:3b:ac:1a:44:b9:
e8:bb:c5:6e:09:30:9b:a0:c3:d3:05:da:3f:d7:86:
ef:2c:5b:87:90:07:53:c8:51:63:2f:74:b0:08:c2:
af:ac:53:fa:7d:42:ab:88:03:cd:a4:f5:58:71:66:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.184.0/21
185.21.0.0/22
IPv6:
2a00:4ba0::/32
Signature Algorithm: sha256WithRSAEncryption
64:11:99:90:57:e8:ac:2a:4f:e7:ff:40:d6:d0:f8:ce:e0:0e:
f7:39:dc:54:dc:ec:d7:25:82:38:61:16:9f:60:6e:ad:ab:69:
98:42:5a:4e:74:3b:c7:32:2f:d1:29:96:0e:44:74:35:a0:61:
68:66:40:4c:ef:be:85:11:82:db:f4:87:0b:5d:10:c6:34:fb:
3c:ed:e9:5a:12:05:9a:7d:37:e7:25:40:1a:27:72:1d:7f:68:
09:23:93:2c:f6:a5:4c:f9:3d:e1:fa:6e:69:11:5d:67:0f:99:
3f:fc:af:90:3c:33:c6:e7:51:9b:73:5e:5c:5e:9d:7a:16:fd:
f6:d9:17:6c:31:c3:08:05:1c:d1:4e:30:bb:69:cf:7a:ff:41:
63:e3:ca:10:17:10:9a:6d:fc:e2:f3:aa:05:ab:c3:72:2e:cb:
34:d6:62:81:a5:8c:df:c9:eb:39:8c:ed:9d:85:cb:9a:77:35:
d4:4b:85:16:26:52:cc:76:c1:bf:2b:77:e0:26:ab:d7:a7:44:
2d:72:e4:40:bd:41:1b:45:b9:e6:bb:cc:20:a7:59:a5:3a:51:
d6:63:03:81:f5:53:28:cc:55:9e:e2:f4:63:f8:b9:c4:d5:b2:
d9:bd:09:8b:66:d5:4a:ce:37:15:1f:dd:8e:15:08:d3:9e:01:
55:06:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:31 2024 by rpki-client on console-ams.rpki-client.org