Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.cer (raw, json)
Hash identifier: UUflGvGct13TuMO9zm6T3YZZD1k3N4QmLvj1rUesnWw=
Subject key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190726BDC38890C7F942121FB4C84F18797
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jul 2024 07:49:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.81.0.0/24
IP: 195.144.5.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:6b:dc:38:89:0c:7f:94:21:21:fb:4c:84:f1:87:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 07:49:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:31:0d:b3:90:f5:82:ce:af:c4:bd:b4:1e:
29:f3:86:2e:58:9f:ec:d5:b1:eb:d0:56:82:42:ec:
43:8c:b3:fb:e4:58:da:bd:f3:73:2f:e3:1b:5c:50:
9b:1a:11:00:90:f2:8e:db:91:23:c9:67:99:3f:73:
c8:ee:b3:e0:34:a4:b1:c6:d8:ca:c1:3b:77:97:e4:
31:c8:40:87:41:ec:95:fe:b9:fa:30:66:2d:f1:1f:
ef:06:a9:bd:e4:35:dc:22:63:84:ab:f4:7c:01:78:
12:1f:8f:d0:8d:4d:2c:e8:ce:8f:f8:51:f3:52:b4:
69:89:c9:fc:5d:72:96:d4:90:5a:52:99:08:9b:11:
eb:13:8b:60:57:80:24:96:a8:81:0b:2e:c0:03:5e:
43:22:3e:eb:07:e7:50:f1:11:09:81:c9:2a:1c:5b:
89:8c:41:12:30:c9:c4:ad:79:00:b5:c9:96:a3:dd:
e3:66:55:65:f0:95:10:95:3d:d6:8f:03:a2:9b:81:
85:cc:2b:72:bd:11:9c:64:16:8f:94:6f:0c:06:bd:
67:00:6d:16:91:fa:17:6f:01:cb:c5:c5:a9:ac:61:
d3:b2:b3:02:9f:1e:e4:a4:29:2e:f9:ec:99:72:da:
21:fe:a0:4a:29:b7:5b:99:47:c1:c5:b3:fe:d0:73:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.0.0/24
195.144.5.0/24
Signature Algorithm: sha256WithRSAEncryption
53:19:e5:6a:9f:13:03:54:52:95:83:09:84:84:49:bc:03:72:
9e:0d:e5:3c:cd:41:ea:ef:d3:1e:f5:14:92:2f:03:ee:92:0f:
0a:d0:f6:9d:92:23:fc:6f:73:67:ac:ed:e5:8b:b4:ad:d2:fd:
75:e6:d0:5d:d2:3c:62:b1:80:ae:72:70:b4:9d:06:33:f8:d9:
21:2e:56:11:25:bf:44:35:8b:3d:d2:9f:36:12:30:8c:5c:11:
c8:69:2f:ef:4b:30:6e:7d:40:16:48:7a:d6:d3:65:1b:f0:32:
8e:a3:cb:f9:67:9c:51:00:42:8e:e7:d8:4a:28:4d:3a:50:70:
14:aa:68:3f:ee:d7:cd:d6:50:02:ee:37:71:99:16:2e:f6:b8:
ab:7a:4e:9d:76:fb:8f:bc:95:a9:3e:47:87:e9:0b:37:91:10:
e6:3c:0c:97:2b:cc:c4:55:8e:af:9d:46:e8:56:25:1b:ff:70:
33:48:52:74:ae:5b:82:39:5c:e4:6b:6a:e8:d0:13:e1:df:25:
01:a7:b8:21:10:25:01:67:05:43:57:dc:94:76:14:50:d0:8a:
e5:54:42:0b:a3:ad:9b:e1:72:61:52:38:20:e8:af:dc:db:2a:
0f:af:ee:9d:24:91:7d:36:0d:ca:53:52:65:c7:16:cb:d1:b4:
fd:5b:15:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:24:07 2024 by rpki-client on console-fra.rpki-client.org