Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer (raw, json)
Hash identifier: RgeyIzm1A30oOmMalBYc5gjBo05wgSn4detxxAD0uG8=
Subject key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF2C962054BC72870EA54545CB59FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 93.191.64.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2c:96:20:54:bc:72:87:0e:a5:45:45:cb:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:83:81:4b:74:f3:18:13:8d:cf:8f:53:1e:
62:1e:70:72:88:d3:0f:4d:1f:93:59:46:fe:44:04:
dd:9f:3b:5f:0a:fd:15:80:c0:54:8b:87:1d:4b:1f:
b4:e6:9b:e5:ed:9b:90:68:5e:17:ca:3a:a0:ed:a6:
6f:54:65:bf:be:dd:63:ce:9f:0b:e5:3b:cb:fe:37:
cb:7f:87:8f:ca:71:69:37:f2:73:d7:46:11:35:65:
e6:50:47:a8:5a:8d:0f:53:24:db:bf:ee:57:f8:3c:
b0:7c:9f:46:78:fe:c4:39:1a:24:20:2b:5e:87:3f:
d1:7c:46:3a:b3:f5:c0:3b:3a:39:f4:45:1e:b5:7b:
d2:ab:a7:17:82:03:13:6c:9a:9a:82:19:53:03:13:
44:98:0b:f3:65:06:25:89:c6:17:b2:25:e3:c9:9f:
2c:09:87:ac:21:12:3f:9c:d1:6d:ea:f3:51:bf:6b:
ef:8e:0f:3a:9a:69:cf:f9:23:e3:5b:a9:1b:df:d5:
9e:99:06:ef:87:9d:2f:ef:53:0f:a3:98:b4:b9:fe:
72:b8:66:c3:9e:f8:0a:89:fe:26:26:2a:24:84:13:
4a:82:6b:71:a5:b1:37:f5:28:49:c1:15:1f:c8:f4:
8b:f2:0c:aa:e6:70:dd:5f:f0:6b:36:ae:ce:46:47:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.64.0/21
Signature Algorithm: sha256WithRSAEncryption
42:c6:fd:1d:c9:20:76:78:dd:bc:f6:58:25:f6:44:78:fe:2f:
00:8c:db:5b:0e:15:8b:7b:f1:77:4a:12:dc:fd:ea:70:b0:ff:
f1:d4:b1:7c:5b:17:0f:85:eb:03:56:04:6b:f6:fc:31:2b:d4:
f7:32:7c:a7:9f:1c:c5:43:0f:39:67:a1:2a:32:20:2a:ac:56:
e7:9b:a6:9b:50:1d:77:3f:05:94:94:95:72:17:6f:59:62:fb:
34:cf:9b:c8:9f:4c:f6:40:e3:c7:df:d7:03:25:57:b0:2e:aa:
52:10:69:16:70:75:58:5a:8b:7e:6a:ad:6c:ee:e9:bb:6d:f9:
b0:84:15:3b:60:70:86:b3:cb:9b:e0:2a:ee:d1:b6:b9:1f:a0:
ab:b6:50:03:63:75:87:01:de:30:1c:27:81:4d:b5:8d:23:6c:
d1:a8:ce:ae:f2:d5:f3:da:d7:01:50:c2:ff:3f:cc:18:d0:33:
cf:43:3f:3d:30:21:26:fd:1b:2c:c0:c7:fb:fb:83:7b:5b:33:
90:c7:01:af:19:f0:65:7c:0e:4e:8f:f7:9d:5a:f3:71:59:47:
6e:a7:ab:3a:ef:e2:e1:2d:72:1a:67:0d:6d:73:95:d8:11:0f:
50:f8:82:4a:3e:bd:bc:63:13:34:5b:9e:8b:3d:15:a3:41:b8:
24:ca:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:51:46 2024 by rpki-client on console-ams.rpki-client.org