Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.cer (raw, json)
Hash identifier: VlZrGlXhhHLmkCeEE9BG8FQNnU74kXPQJe0C+iMQQoY=
Subject key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425025E702AA0F2F04865C9571B100C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:910::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:02:5e:70:2a:a0:f2:f0:48:65:c9:57:1b:10:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5c:f3:3e:69:59:b7:1d:fa:cd:40:2d:d8:82:
b0:3c:55:31:4b:0d:84:b1:5b:07:c4:d8:95:9f:9d:
37:58:d4:99:7d:b0:36:4b:a4:90:dc:f9:15:30:01:
80:3b:f7:03:dc:cb:9f:29:6e:ba:44:a4:d2:83:c0:
40:11:f0:24:c4:45:84:0e:ed:37:7a:79:9a:f3:51:
45:6c:29:1c:31:70:36:da:d4:e5:76:bd:5b:57:eb:
47:6d:0c:24:c5:47:a1:f4:1b:d9:15:83:ff:60:8f:
64:ea:3f:19:47:bc:8f:d9:3e:21:76:ba:0a:ee:91:
a1:04:34:f8:c2:4b:36:2b:09:71:e6:4f:aa:0c:7f:
d7:40:92:29:e1:b2:9b:ea:cd:0e:6f:35:53:1c:94:
d0:63:6a:b5:60:4d:0f:16:cd:d4:b4:09:b7:17:55:
85:0c:6d:14:95:df:75:da:9c:10:2a:0c:89:38:5f:
29:e4:6b:06:47:8b:80:87:71:02:57:3d:03:03:9c:
06:ae:bd:f3:df:a1:5e:eb:a0:42:ef:16:47:e0:9f:
8b:56:ff:6c:bb:3d:72:54:7d:6c:73:3d:a8:cf:21:
6d:85:5d:95:56:6f:ed:ca:36:51:ff:8b:21:d9:72:
48:6a:6b:f6:01:93:60:24:42:10:a3:19:21:c4:79:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:910::/48
Signature Algorithm: sha256WithRSAEncryption
79:19:0b:f7:67:f2:fb:f3:75:5e:5f:b2:32:89:79:7f:ff:f3:
7a:55:e8:7f:a6:60:35:e3:12:4f:0a:c6:f3:5a:5f:4f:ab:5d:
b2:e2:9c:f5:4e:09:35:e0:3a:c2:29:8f:ed:60:ab:52:e4:82:
0b:68:c0:88:56:7d:57:34:2a:4c:81:a8:80:2d:5b:41:12:47:
bf:22:f1:0d:cc:17:a8:ec:6e:57:1d:04:e5:7e:02:3d:d4:d1:
a9:58:b4:17:06:39:5b:2a:6b:7c:ed:8f:43:18:4e:de:6a:2e:
ca:a5:d8:bc:a3:3f:21:c1:ab:05:c9:11:44:04:d5:21:30:5b:
85:ad:46:ee:7a:82:5d:21:6b:c4:f4:91:18:29:ea:d7:57:8c:
fc:a8:58:6e:c0:14:b2:9f:6c:73:45:cd:3b:3d:80:de:6a:dc:
9c:d5:1e:07:93:4f:c2:31:83:c9:b3:f5:d8:08:f9:b1:5b:9d:
d5:c3:8f:d7:c3:b9:02:c6:03:05:4d:3b:92:42:7b:6a:f3:85:
04:a5:3c:11:4d:fb:5e:6e:9b:d1:15:e7:a5:d2:77:cf:9a:7f:
d5:39:df:38:8a:04:cb:a1:92:8c:54:04:16:62:49:27:d5:47:
59:a7:32:8e:d6:c3:c7:20:ca:7b:e5:0a:c8:84:08:d6:0e:68:
fd:8b:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:02:46 2024 by rpki-client on console-fra.rpki-client.org