Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer (raw, json)
Hash identifier: lteEgXiYFwvMksR7HoLLfFkSvYYtidmNBQ5oBb4Gy9o=
Subject key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019290118945F3EA21047CE320E181A116EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Oct 2024 12:05:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.224.3.0/24
IP: 2a01:f4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:11:89:45:f3:ea:21:04:7c:e3:20:e1:81:a1:16:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 12:05:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:78:a3:c3:8a:e8:a2:59:3b:27:93:36:ff:
e0:91:c4:9f:96:09:43:e2:73:be:7d:3b:18:89:90:
dd:f3:c2:17:f6:16:7d:7b:3c:3f:e3:03:ee:c4:25:
1a:cf:de:b1:67:91:96:d4:89:03:a5:8e:15:f0:b8:
36:2e:ea:20:89:f1:aa:9b:b0:43:d1:4c:3f:a7:02:
c5:64:0b:7d:a4:32:13:24:1f:26:ba:02:b9:57:2f:
cb:bd:e2:9c:b6:d7:07:34:2f:e7:55:9a:da:ee:3f:
1c:7b:a6:c6:07:2c:a9:b8:df:28:79:78:a0:1a:c1:
3f:91:c6:36:55:c8:91:d0:77:b9:40:54:ba:50:17:
03:27:e8:7e:33:eb:49:52:4a:f8:18:8f:6e:20:e7:
a5:3e:15:dd:99:61:4a:db:63:a0:84:e1:23:9d:c5:
e8:3e:fc:17:2a:11:c7:18:94:15:d3:43:f8:4f:c5:
4b:16:41:74:eb:bd:8f:73:3b:bd:4f:23:a4:67:ab:
4d:e1:85:de:ea:3c:14:7c:00:58:ae:f5:94:60:e2:
54:28:05:d9:65:fc:01:88:38:9e:0f:84:c1:cd:0f:
fe:17:33:ef:84:51:99:64:65:08:81:6e:11:7f:b5:
11:a7:ed:00:74:c8:6d:77:a1:af:28:7f:db:e2:1a:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.3.0/24
IPv6:
2a01:f4c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:02:bc:be:80:78:25:ca:22:c7:27:35:ab:0b:3f:7c:16:5e:
68:82:8f:eb:5a:7b:0d:59:f4:4e:cd:d2:0c:25:6e:fb:cf:39:
71:0b:2a:86:08:2a:d8:f2:01:0f:cb:3e:32:42:4d:5f:b6:42:
c9:81:b0:3a:8a:15:eb:57:d9:bf:51:22:31:53:cf:c7:2a:4c:
1a:e9:04:7e:1e:ef:a2:f0:96:5e:cd:5b:61:d0:82:68:ce:42:
40:93:4a:47:fa:70:6d:d4:d9:2b:1c:da:b6:0f:f9:65:48:8b:
06:3f:c3:42:98:52:6e:ff:a2:ea:f2:10:80:f7:ef:3e:55:4e:
59:ee:d2:16:a4:a2:ba:b6:3a:55:0e:21:83:c6:a1:6e:d5:73:
e9:6a:4b:40:aa:45:60:10:10:c3:30:48:97:48:53:2b:06:cf:
98:5c:1c:6a:a2:2e:ba:03:ac:01:36:81:58:60:73:68:6b:23:
7a:f5:9b:4e:2d:61:d5:9d:45:fd:25:83:72:64:f2:a6:23:2b:
aa:be:3c:45:e2:78:ec:bf:20:2b:19:58:56:16:76:34:ce:98:
8d:da:17:f6:59:0b:9a:06:98:3f:77:28:3a:d9:33:63:73:cf:
f8:f7:b7:6d:d8:6b:f8:26:ba:cd:73:54:cd:78:30:e2:6e:1a:
4f:d7:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:51 2024 by rpki-client on console-ams.rpki-client.org