Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
File: 2-arjgxG6EG0TSucawO7ZfViHbE.cer (raw, json)
Hash identifier: UwAPta/VUkI/Q1znZI4lETvrWphN2Cg/x+UbTCqbvKo=
Subject key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191E00215EC2109EDC69161C89486CF7099
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Sep 2024 07:35:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.142.146.0/23
IP: 2a0f:ca80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:02:15:ec:21:09:ed:c6:91:61:c8:94:86:cf:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 07:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:c8:29:a0:88:c2:b3:5c:d6:ac:ab:1e:3a:
2b:3d:6f:f2:f9:3a:05:0e:1b:4f:0a:e1:ea:da:96:
bd:26:1f:a7:dc:61:ce:0a:82:13:ef:59:cc:a4:45:
b0:11:6c:5e:bb:97:be:01:f9:79:a5:9e:9a:16:52:
77:b9:34:7e:d3:7e:10:4a:53:18:5a:40:eb:9e:92:
1b:c6:30:f5:7d:01:5e:cb:5a:eb:6d:1a:7e:66:e8:
43:7d:d4:b5:45:b4:0f:03:76:4b:49:99:fd:be:cd:
e1:41:9e:14:44:3d:12:27:f1:e0:ed:da:fe:65:81:
d7:0d:a7:f1:d0:fe:4f:2f:1f:c6:52:42:84:bb:53:
58:c1:6f:2f:7b:3e:67:d3:ff:08:b4:c1:bd:1b:c6:
e0:7f:e3:45:6f:6f:13:8e:e3:dd:06:d6:1f:a0:df:
66:03:af:e2:dc:42:15:d6:79:aa:b0:05:49:bd:a6:
70:8a:19:4c:48:5f:1d:3f:87:7a:d1:46:4d:74:bb:
bf:ad:c2:5b:36:f1:09:55:bb:ed:b0:fc:92:fe:08:
13:07:bd:3e:97:d6:e7:f8:d9:c0:71:94:ce:ee:25:
46:3d:5d:0b:b6:5e:42:19:b0:0b:4c:08:48:f0:2c:
e2:f6:b2:80:b3:57:46:55:a6:34:55:cd:84:54:4e:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.146.0/23
IPv6:
2a0f:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
38:55:8c:87:f9:05:c5:0a:0b:2e:ff:1e:8e:f5:6c:c2:65:3b:
60:bc:1d:b9:b2:0f:7c:74:a2:0f:56:02:57:57:46:c9:b4:f2:
17:eb:44:d0:09:bd:c7:bc:2d:35:b6:8a:4d:6d:f2:8d:b5:f0:
e4:59:bc:c5:37:1f:fb:1f:14:97:9c:55:99:de:1f:6d:17:de:
c5:4c:24:45:4d:04:19:41:af:78:a9:c9:d8:13:8a:9a:97:54:
fd:b8:2a:92:4a:ae:17:63:33:f1:00:c1:f6:5e:66:23:7d:63:
74:cf:93:56:3b:fa:3b:18:b1:f8:9a:e1:eb:2f:12:3d:c2:03:
b7:36:89:03:96:71:91:03:b9:5b:b8:80:b9:be:3d:c5:4a:64:
b5:d7:e3:23:fd:ea:87:d8:a9:95:bd:45:59:cd:f3:50:c7:fe:
74:ad:e3:04:4f:55:2a:6d:25:4e:17:e4:dd:fc:ff:47:02:56:
ae:53:68:d1:d9:4e:b7:56:a6:6f:a1:6f:c8:87:ec:6c:59:55:
8a:0a:65:12:74:9e:3c:ee:45:c7:0c:b8:9c:cb:70:6e:2c:ea:
dd:8c:af:f5:5d:8b:59:70:8f:6d:11:f2:9f:94:f7:9f:76:e6:
73:88:5c:e5:b9:58:00:73:16:06:6c:f2:82:c9:d7:dc:f6:cc:
0f:28:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:26 2024 by rpki-client on console-fra.rpki-client.org