Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.cer (raw, json)
Hash identifier: sqxQRJjOTpesvcCVFzhLiqz2atFzLxLyQakRPw2BkuA=
Subject key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254B199326C339D21079E56A01DF59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:c9c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4b:19:93:26:c3:39:d2:10:79:e5:6a:01:df:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:1d:41:86:7b:d4:6b:59:df:f2:07:0f:ce:
a2:b5:de:3d:39:d8:97:7c:67:8f:4f:de:88:4a:d6:
27:a5:23:42:fe:96:26:f0:5b:2c:ed:06:ad:4e:b0:
d1:38:d0:5c:02:23:af:2f:4f:f5:15:02:26:26:a0:
da:8f:4c:5f:e2:7f:5e:0e:ec:af:d8:e9:ba:5c:90:
ba:2c:74:62:60:bc:30:86:d9:41:f3:61:c7:38:3e:
db:85:b8:aa:84:ec:26:79:a4:9e:29:73:e3:38:5f:
fb:ce:7d:b0:73:cc:b1:2a:35:0e:95:1b:94:94:bd:
89:c9:96:0d:1e:a3:7a:3e:57:95:38:a6:d8:5b:2c:
c2:cc:20:58:9b:18:19:ae:6a:35:06:b9:f0:2f:08:
e3:a9:ca:aa:4d:c8:ac:22:bb:5b:15:ed:79:f7:f4:
4b:5d:bc:56:28:b9:9f:f4:98:28:a0:dc:44:5b:ca:
88:53:68:2f:e3:c4:63:48:83:68:e8:2b:41:64:5b:
cd:4e:dc:7e:44:e4:8f:ee:3f:ed:c2:cd:d1:d8:06:
2c:38:40:87:80:24:c4:23:f2:b8:09:bf:9c:71:c8:
f9:da:7e:a1:26:6c:a6:36:b2:72:9d:d3:a0:aa:0b:
65:ad:7f:d1:ef:98:a8:a1:0d:4a:dd:3a:c7:8f:71:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c9c::/48
Signature Algorithm: sha256WithRSAEncryption
6d:41:27:01:f9:22:73:80:8d:03:15:61:69:79:71:4a:1b:0d:
dc:d2:82:aa:37:50:db:07:c5:cd:9d:7d:d3:de:fa:b1:10:9c:
b6:7c:07:27:e4:b3:a6:d1:b4:65:13:1e:1f:c1:10:0e:56:5e:
65:70:f5:57:de:50:51:08:50:3a:ce:36:bb:4c:b4:80:9c:a9:
d4:ca:83:41:f8:aa:50:fc:13:fe:1f:7f:ca:c4:50:88:31:d2:
fc:cc:61:73:dc:87:27:04:7d:a0:74:d4:9f:8b:8b:03:74:e8:
bc:4f:c0:ff:09:c5:93:b7:2f:07:5f:fb:d9:8e:6d:5a:ae:48:
12:4c:33:ae:05:ba:d0:68:5f:68:a1:5b:0c:bb:7f:84:2e:58:
c0:19:ca:06:5c:32:2b:3e:98:2e:13:89:83:74:8f:52:74:89:
2e:bc:30:bc:a3:12:69:76:53:6c:b7:15:d2:5f:82:1e:98:49:
93:51:ba:c5:00:a2:1d:47:60:52:5d:52:4d:c7:7f:0f:87:4c:
6f:40:7d:54:d7:f3:9f:54:d2:fd:60:0e:06:11:49:f3:a7:78:
90:d4:b8:75:99:63:a7:2a:51:b9:1b:2c:7a:b0:8d:72:a7:9b:
e5:2f:7f:31:8e:0e:d5:25:ff:3b:95:27:e9:ae:0a:e4:97:c0:
10:17:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:51:42 2024 by rpki-client on console-ams.rpki-client.org