Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer (raw, json)
Hash identifier: s7wOON7dH0DhUN2MNfgmgzFR06MV/FWcxZHlGUsJD0g=
Subject key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E7C7E07D839F906B47397A52417D174E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Mar 2024 20:40:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.224.3.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:7e:07:d8:39:f9:06:b4:73:97:a5:24:17:d1:74:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 20:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:78:a3:c3:8a:e8:a2:59:3b:27:93:36:ff:
e0:91:c4:9f:96:09:43:e2:73:be:7d:3b:18:89:90:
dd:f3:c2:17:f6:16:7d:7b:3c:3f:e3:03:ee:c4:25:
1a:cf:de:b1:67:91:96:d4:89:03:a5:8e:15:f0:b8:
36:2e:ea:20:89:f1:aa:9b:b0:43:d1:4c:3f:a7:02:
c5:64:0b:7d:a4:32:13:24:1f:26:ba:02:b9:57:2f:
cb:bd:e2:9c:b6:d7:07:34:2f:e7:55:9a:da:ee:3f:
1c:7b:a6:c6:07:2c:a9:b8:df:28:79:78:a0:1a:c1:
3f:91:c6:36:55:c8:91:d0:77:b9:40:54:ba:50:17:
03:27:e8:7e:33:eb:49:52:4a:f8:18:8f:6e:20:e7:
a5:3e:15:dd:99:61:4a:db:63:a0:84:e1:23:9d:c5:
e8:3e:fc:17:2a:11:c7:18:94:15:d3:43:f8:4f:c5:
4b:16:41:74:eb:bd:8f:73:3b:bd:4f:23:a4:67:ab:
4d:e1:85:de:ea:3c:14:7c:00:58:ae:f5:94:60:e2:
54:28:05:d9:65:fc:01:88:38:9e:0f:84:c1:cd:0f:
fe:17:33:ef:84:51:99:64:65:08:81:6e:11:7f:b5:
11:a7:ed:00:74:c8:6d:77:a1:af:28:7f:db:e2:1a:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.3.0/24
Signature Algorithm: sha256WithRSAEncryption
62:11:f6:2c:a6:cd:00:e5:62:57:bc:d2:59:3c:ad:fb:b7:9b:
0f:5b:03:03:34:da:91:e0:7f:6c:e2:69:60:5a:85:24:37:b9:
a8:d1:f5:56:96:1b:fd:10:8b:8a:ee:f9:f9:f1:ca:11:51:8a:
a2:08:67:6c:c3:d5:44:77:63:69:b2:e3:da:88:ec:7d:44:73:
76:e2:44:74:ab:b4:03:bd:a2:18:3e:88:55:07:48:9b:3b:ad:
da:9e:5b:13:14:c5:cc:03:c0:cd:63:2b:c8:72:1b:d6:34:cd:
ce:10:aa:86:c2:80:51:05:6d:e2:bc:ce:eb:4a:9b:b0:bd:ff:
21:b5:db:4a:51:4c:79:2f:d8:49:e9:8d:6d:f9:a3:87:0a:bb:
e4:2b:15:58:d3:67:68:aa:c7:1d:20:0c:82:92:65:e0:c4:d6:
2e:03:b4:ee:47:70:75:b0:c5:3f:a0:73:d8:a3:81:d5:3f:fd:
b0:45:fa:68:45:44:61:33:ad:af:b5:fa:c4:dc:b9:9c:e4:52:
88:fb:d4:82:73:32:df:ce:81:0c:32:4c:e2:ed:bc:1b:34:f9:
52:ed:39:cf:ce:1c:bb:64:2c:a0:31:de:e6:fa:26:7e:95:d3:
5c:8a:99:1a:e4:70:56:26:4d:5e:6d:64:4d:81:77:62:42:a7:
78:cc:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:27:33 2024 by rpki-client on console-fra.rpki-client.org