Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
File: 0seIZkHuEBvHspX9hvGSP8KD89A.cer (raw, json)
Hash identifier: YCGtxx8uCSHuZyRxjfFdnMwNjKOYvRBbtNKIgDMJSZw=
Subject key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72AA15474CC7428F4D7334BADE91F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.119.196.0/24
IP: 2a14:3d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2a:a1:54:74:cc:74:28:f4:d7:33:4b:ad:e9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:8b:e3:d1:0b:62:72:89:27:f6:ee:d2:cb:
70:98:7d:27:7b:9d:ee:0b:8f:9a:e3:36:fc:63:b7:
40:af:05:43:7a:b4:14:23:e2:6e:2f:e4:08:52:cc:
ba:8d:88:9f:59:3b:85:51:33:86:43:53:8e:70:6f:
e6:c6:68:92:c4:7e:8c:c2:b7:96:76:1e:63:0a:1d:
cc:40:5b:f2:4d:1f:85:8e:54:e8:1b:df:6d:14:fa:
d3:cc:cc:d7:30:20:58:db:f7:68:ee:48:97:f2:69:
76:9d:a6:29:1e:e6:f3:e1:84:9b:ee:49:8a:c5:4f:
8b:e8:df:4b:e9:99:c2:89:05:e1:5a:c2:ad:a2:08:
b1:c9:a4:59:e4:a5:2f:82:ee:94:e4:7c:21:ac:4b:
ea:1f:ba:32:0f:69:0e:bb:3a:34:96:ab:69:09:6c:
48:5f:b9:4e:5e:4c:5e:27:60:7c:74:e6:59:4c:bb:
4e:e4:96:a7:7b:c5:96:09:66:f2:58:9d:e1:3a:e2:
73:d6:cf:b4:f2:5e:13:a6:f8:a9:8d:eb:87:58:f5:
67:05:0c:17:88:4a:1d:24:4f:06:12:6b:58:5f:7f:
26:07:52:d1:3a:c3:54:1c:bc:22:c7:12:98:5c:ac:
c9:63:84:73:f3:c6:19:bc:bb:b5:e4:85:b6:7f:5b:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.196.0/24
IPv6:
2a14:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
6e:2b:40:b0:af:72:7c:c5:ad:75:73:e3:ef:43:f1:15:0e:31:
6b:ea:16:38:1e:11:45:b6:a4:f8:3d:96:6e:b4:9e:09:95:84:
83:9f:ab:4d:6b:64:66:8c:23:87:f0:1a:96:5e:54:eb:8b:b8:
70:2b:f7:b0:2c:6a:0d:51:14:48:82:eb:06:ea:af:d3:a3:55:
c5:37:d8:f3:d7:50:34:33:f3:e7:0f:b5:fb:30:a2:21:02:77:
fa:1f:64:29:69:1e:de:01:26:2d:cf:f8:08:bb:91:fc:a6:e4:
80:a0:e6:d7:0f:51:37:6c:4d:1d:3e:3c:5a:55:f2:8a:17:74:
2e:8e:3c:73:b3:33:5f:f5:0d:17:48:dc:2d:cc:cf:dc:d9:b5:
54:a3:bd:1f:0d:7b:10:9d:32:64:a8:7c:86:16:33:d2:ec:7f:
25:2c:79:58:4a:89:76:15:3b:55:aa:c5:8b:f7:a0:a4:49:f9:
0d:57:af:2f:0d:45:96:ff:a5:bd:83:b5:53:ec:e9:d3:15:e2:
d0:f3:c5:f7:de:63:b2:5f:bd:f1:87:d9:9e:b7:19:31:16:10:
6f:25:5a:1e:31:0b:2c:c0:e3:a8:83:49:8e:7c:1b:aa:48:24:
70:9f:5f:08:68:7b:e6:b2:ae:7c:ca:3b:b8:a2:62:2b:27:77:
16:30:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 08:35:29 2024 by rpki-client on console-fra.rpki-client.org