Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.cer (raw, json)
Hash identifier: f5ACDGsmS942aueid2h+RMBdj3cJtUbFdWpsUoZDGzw=
Subject key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E61AA6CF221B5B81A3B7E23889291
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.163.222.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:61:aa:6c:f2:21:b5:b8:1a:3b:7e:23:88:92:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:64:ad:21:7c:95:7b:6d:20:b2:aa:32:72:
7a:1a:0f:ec:a4:94:ac:c3:62:ff:0d:ef:e7:47:ab:
50:8d:22:43:fa:b7:49:93:ce:44:3b:da:98:ae:3c:
25:17:b4:d3:c1:1f:cb:5b:34:37:6a:95:d1:e1:79:
f1:b9:6a:ce:2f:9e:a4:d4:5f:24:e9:5d:20:d0:55:
c7:2e:bf:9d:7c:3f:ed:79:62:87:13:db:82:99:ba:
9d:b3:97:c0:5e:7b:b4:e6:93:96:66:a5:87:e1:13:
65:98:c5:27:49:76:bb:8b:5d:ac:30:c1:17:6f:bb:
70:be:d5:71:d0:3f:c3:72:9e:09:98:3b:26:b7:7b:
35:ce:e1:06:18:2d:c0:45:77:68:5b:53:6f:33:7f:
14:7f:6f:05:41:aa:67:bd:91:35:65:9b:43:5b:39:
47:89:d5:4d:b8:88:60:31:17:65:58:7a:81:5f:d4:
00:8e:c6:dc:bf:5b:14:58:a3:ef:6c:bf:86:92:27:
d3:46:d0:44:20:1e:87:94:33:a4:fd:f1:36:e9:2f:
27:a3:3c:6a:ad:ac:4f:8d:de:5d:2e:4e:1f:76:c0:
57:20:e1:b5:81:9a:17:65:9b:08:34:9a:d3:06:e1:
b2:78:56:6a:79:0a:b8:5b:7d:14:99:d9:ba:d6:82:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bc:ca:7f:47:50:9e:ac:f3:02:80:ae:c5:3b:f8:72:82:6c:
ee:95:10:7d:01:fc:63:1a:15:33:fe:63:2a:69:75:e9:7d:b0:
13:2d:66:b2:51:02:95:fc:9e:98:38:78:09:3b:c6:29:7a:86:
4b:43:9a:9d:6a:24:e6:74:d0:8e:11:4d:84:a2:b6:6e:b5:ac:
4f:57:de:a4:a7:bd:86:ac:30:fa:d5:2e:4e:ad:f1:89:4d:2e:
98:59:2e:af:a5:3a:35:c2:6e:32:58:44:75:26:33:cc:18:a5:
ef:38:7a:e3:78:f9:82:7f:37:e8:9d:09:10:79:f9:5c:1d:57:
7b:e8:fb:72:0e:d6:41:ba:43:27:91:6d:2a:62:64:c3:28:66:
50:d1:2b:52:b8:b4:45:e2:de:c5:cf:7b:cb:a0:db:9e:a7:19:
7e:bc:f9:1d:55:b8:ec:f5:3a:b9:0e:4d:b5:e6:e2:d7:ec:86:
b8:56:90:21:6c:62:a4:d0:1a:8a:20:f4:de:11:ae:c2:cd:42:
05:1b:ac:02:df:72:95:26:db:e9:78:d2:9f:85:a4:48:38:e9:
05:e5:9a:a7:81:e2:ee:f9:2e:23:5b:e5:5f:62:11:2a:b8:d5:
fb:c0:80:a5:69:13:1a:9a:0b:fa:d3:7a:e4:25:f0:2c:3a:8c:
7a:e7:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:49:15 2024 by rpki-client on console-ams.rpki-client.org