Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer (raw, json)
Hash identifier: mmSqA3Q0ytOnG0JsPDSYj51k0MTb4lRPvcdl0RIOWsg=
Subject key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348C8EBC9C6112634AC46D954A67CA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 84.38.72.0/22
IP: 91.203.204.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c8:eb:c9:c6:11:26:34:ac:46:d9:54:a6:7c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e214eb35a35fd488860703b7990b8170af17912f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:17:7f:e1:7f:0d:1c:67:90:bf:da:73:af:
44:f1:dd:18:d1:25:bb:f7:d1:b1:12:90:da:3f:07:
93:56:62:08:84:e8:db:f0:a9:e8:f9:0b:0f:cc:f9:
89:ef:80:c4:7c:a8:26:26:93:ea:43:b7:a0:ac:b8:
73:a9:b5:db:b0:4b:53:31:60:07:f5:a6:32:49:74:
65:c0:5a:c6:fd:b0:33:2b:f0:63:06:46:59:91:9e:
6a:e9:f0:1e:82:41:69:cd:6a:60:bf:27:89:cf:c9:
49:ef:19:c2:23:b4:f5:1d:ef:f5:5c:a6:a7:94:51:
21:f1:c9:54:24:fd:f8:53:76:6c:67:df:a8:bb:65:
c1:b1:36:4f:46:43:13:0e:81:6e:cb:44:52:72:64:
a2:58:14:ef:e8:81:86:bf:5f:ec:c4:5f:c7:db:86:
78:73:a1:7a:0a:0b:06:14:aa:b4:64:e2:c2:aa:2d:
92:b5:60:f6:50:41:e8:d1:2e:43:ec:71:46:ba:7e:
4c:77:86:34:94:a0:20:61:4d:64:9b:0b:83:a3:15:
d7:89:b6:85:d4:8a:67:7f:d7:d1:9b:6c:68:1c:ff:
2a:83:89:5a:9a:48:45:48:2b:4e:db:77:9f:21:d7:
4e:25:e8:10:72:2c:24:13:4a:23:ae:a4:05:70:28:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.72.0/22
91.203.204.0/22
Signature Algorithm: sha256WithRSAEncryption
92:46:ab:75:25:c1:9f:04:43:83:06:74:50:50:23:74:9e:74:
6f:d8:b6:23:de:4e:f8:e4:c3:64:f4:8e:90:c1:2a:85:d2:4f:
53:f4:dd:96:55:5e:70:17:ca:25:d5:17:8f:8d:6e:a3:ba:97:
81:1e:32:bf:b9:d2:92:f2:80:56:e7:75:f3:e7:16:b1:2c:96:
10:06:3c:75:9c:ac:c0:7d:bb:cd:80:2e:cb:76:19:3e:cb:54:
0d:26:4f:fc:6d:19:9c:51:01:8d:38:02:7e:aa:e5:af:d2:5d:
12:30:25:07:b0:4b:56:15:10:a9:ea:7a:fb:13:55:b0:75:1d:
77:9f:6f:9e:6a:25:f0:a5:18:13:44:4a:97:4e:73:ab:a2:ac:
1b:c5:c8:3d:ae:45:1e:c7:5b:4d:52:72:24:8b:35:0e:8c:b7:
a7:a6:a3:03:a8:22:26:b2:e2:95:62:62:13:2f:77:40:9a:5b:
41:a9:5a:22:fc:08:36:08:6d:d0:10:22:d0:f2:69:d5:3e:7d:
f0:c3:d0:0b:9c:43:cb:c3:09:87:47:71:ff:ee:0e:28:80:4a:
2e:ec:86:78:ac:00:65:5b:69:6e:1a:2d:42:9b:ab:92:1c:c3:
7c:fb:4f:14:6c:de:a6:b1:9f:91:49:ec:a4:b0:42:0f:5a:cc:
ad:76:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:36:24 2024 by rpki-client on console-fra.rpki-client.org