Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer (raw, json)
Hash identifier: 2zZhdO6R+3vKOWOUxtmco96rfAbA56xpfahYbN4yZm8=
Subject key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6819455FE1EAFD04753257A89636E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 151.100.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:81:94:55:fe:1e:af:d0:47:53:25:7a:89:63:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d422367433765b541a37390a998997b737c46472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:10:3e:a1:b1:67:50:fb:97:42:fd:2b:b0:
6f:c5:06:90:43:ee:ed:c7:6f:ec:79:ab:10:37:5a:
95:af:1c:02:55:d2:0e:20:b9:d0:c6:c5:80:5a:1a:
00:91:39:e5:0a:99:f4:5f:5b:e8:bb:e6:5f:51:47:
10:c1:6e:2b:33:5e:35:d2:54:df:4e:6b:79:c0:35:
4d:16:51:cc:e7:d7:ce:5c:7c:47:28:3f:be:20:6c:
47:b1:97:29:78:5d:fb:e9:f8:f4:fc:3d:3a:d6:eb:
bf:aa:e9:9f:ab:a4:e4:ac:d4:2e:4c:32:1e:55:a4:
32:3a:83:80:f5:5b:0f:41:3b:34:2a:0f:8b:26:c2:
98:53:55:c5:b0:24:4d:a8:a9:dc:09:1c:10:8a:f9:
36:75:38:6d:ff:da:fc:56:df:32:24:9f:c9:9c:38:
c8:d9:34:03:5b:26:2a:b7:7c:63:48:43:d4:7e:0e:
98:08:a6:e1:36:73:12:2f:49:b0:16:ec:96:7b:be:
51:2e:ba:c6:18:e0:02:c0:7f:5f:79:b1:ac:56:af:
c1:be:58:82:ea:16:d2:36:1d:d3:c2:b0:1f:be:ef:
5e:6f:c0:89:c3:f7:01:dc:a5:b4:7c:7b:c5:51:ea:
a7:7f:a7:ed:bb:84:66:a2:22:6c:72:b9:30:3c:76:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:99:ba:d4:6c:1f:a2:48:ca:1a:f3:4b:c5:d3:b8:db:a3:21:
20:e7:e4:a1:a4:b8:1d:30:a1:54:87:60:dc:cb:5e:77:3e:bd:
36:db:ea:2c:e1:61:a3:18:f9:c0:5b:67:d4:b4:b1:81:49:e6:
76:92:5b:95:cf:d8:69:dc:f7:75:19:4c:76:38:85:d9:de:1f:
12:b6:85:0c:1c:2c:9b:44:39:fa:68:5a:8f:e0:55:34:55:84:
4d:b7:44:51:43:3e:45:6c:ec:6f:71:18:7c:9b:c4:91:61:6e:
5a:7c:f2:c5:a4:7a:68:35:00:11:ba:4e:eb:90:7f:02:6a:65:
f5:ad:a1:4a:62:cc:ad:6e:89:4a:0c:76:55:7f:c0:19:f2:97:
3d:dd:54:22:1e:df:76:93:f2:0d:db:cc:44:7e:d8:9a:43:f0:
4f:f2:57:9a:13:d0:9a:bc:fd:dc:8d:af:69:ec:3b:99:63:79:
78:50:f5:3b:8e:a8:45:50:78:d2:0d:11:45:0c:29:97:81:a5:
31:bc:93:97:13:f4:e8:f2:cf:8c:4f:60:bb:d2:21:6d:82:9b:
e5:61:04:72:30:cd:a5:96:bb:fb:32:4a:88:3c:4a:1d:57:c0:
39:60:71:15:08:71:0a:a6:df:72:73:b5:0f:7a:b5:7b:1c:c3:
36:d9:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:15 2024 by rpki-client on console-fra.rpki-client.org