Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer (raw, json)
Hash identifier: urNBdzcRjktpmAyCa5crqcM234V75o4JxV2WIGnrA9Y=
Subject key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254D9AEB2D7F7AB64664E3131F6160
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.33.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:9a:eb:2d:7f:7a:b6:46:64:e3:13:1f:61:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:0a:dc:7f:e0:81:88:37:79:e4:50:7c:b0:
72:a8:be:2f:da:97:e9:76:dd:14:b4:69:1d:12:50:
0b:56:86:b3:34:b2:15:6a:f4:c7:41:0a:e9:ee:68:
34:0c:f8:4a:c1:c9:71:d1:23:08:0c:30:fa:c8:92:
0e:d9:a0:8e:bf:0b:81:ff:e2:93:b8:87:b2:e9:04:
36:21:f8:d5:e6:03:28:b2:9e:8b:df:db:13:a6:ee:
26:3d:dc:38:36:6f:b5:a6:f3:20:f8:f4:49:06:bc:
5f:ed:0f:bf:c1:a7:50:ee:fa:60:00:e7:63:88:6e:
3b:c0:c7:c7:ab:3b:cb:46:97:c0:8c:58:ac:3b:b1:
11:48:f5:50:7e:b1:f0:9d:c0:ea:15:dc:86:9d:bb:
05:f9:d1:24:cd:1f:87:7c:ba:94:d5:64:e3:5b:7e:
b7:7f:e0:7d:a0:1e:79:9f:d0:ba:ad:21:e9:f1:2e:
b3:1f:83:8a:89:e7:c9:30:51:55:c1:f6:e2:19:38:
b1:7c:1a:6b:30:67:45:89:a4:97:93:e1:cc:2f:8e:
fc:0e:d1:af:10:03:35:bf:72:73:fb:e5:00:7d:97:
55:35:73:37:60:17:ae:52:1a:c6:ea:39:51:ba:81:
23:ea:29:0d:9d:8e:67:bc:8b:d5:3a:c1:69:ab:65:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.33.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:98:99:29:a1:62:25:c2:6a:8b:f3:fe:73:61:ba:34:0f:30:
0c:3f:3c:cb:7e:51:a6:0a:c5:31:e8:34:d8:c6:5e:4e:4e:7f:
9a:10:59:8f:c8:f3:80:9f:ca:71:cb:db:5c:1d:fa:5c:3a:76:
70:b2:bd:a5:11:3e:25:f9:a6:8f:73:4c:b2:35:ef:81:78:32:
b4:d0:99:ce:0d:be:f9:eb:00:67:87:8f:a6:17:3e:d2:24:8e:
14:14:04:83:89:f4:38:48:2a:f1:eb:b7:82:e1:55:38:34:f7:
91:78:2a:e0:7d:e4:bc:d1:d5:6a:30:3d:cf:96:01:2d:31:cc:
5c:37:c3:93:c5:eb:4b:d6:42:76:bc:35:93:13:f2:ac:2e:22:
82:8b:cc:ac:ac:a9:4e:35:05:01:d2:97:9c:df:62:6d:dd:77:
c5:b2:a7:db:85:88:63:b4:64:a9:02:7e:e9:a8:b0:57:90:24:
6a:0d:f3:3f:35:19:0b:c3:bd:13:28:bd:19:86:99:a2:25:ef:
e1:eb:a0:ab:31:3f:a2:bf:54:dc:a5:72:74:97:e0:f2:84:44:
0c:40:95:d1:c4:2d:65:b1:bc:03:38:26:ed:ae:b3:fe:dd:25:
fa:28:bc:86:33:71:d6:c6:82:76:5f:75:e4:18:a9:e7:eb:f0:
57:ab:93:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 03:56:54 2024 by rpki-client on console-fra.rpki-client.org