Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.cer (raw, json)
Hash identifier: UTGs/ucs4kQA83EEE652ARirkKsIjmYWJEWK2TnxJWg=
Subject key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B73156B8B278AE8316850E40316DA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.81.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:31:56:b8:b2:78:ae:83:16:85:0e:40:31:6d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:31:0d:b3:90:f5:82:ce:af:c4:bd:b4:1e:
29:f3:86:2e:58:9f:ec:d5:b1:eb:d0:56:82:42:ec:
43:8c:b3:fb:e4:58:da:bd:f3:73:2f:e3:1b:5c:50:
9b:1a:11:00:90:f2:8e:db:91:23:c9:67:99:3f:73:
c8:ee:b3:e0:34:a4:b1:c6:d8:ca:c1:3b:77:97:e4:
31:c8:40:87:41:ec:95:fe:b9:fa:30:66:2d:f1:1f:
ef:06:a9:bd:e4:35:dc:22:63:84:ab:f4:7c:01:78:
12:1f:8f:d0:8d:4d:2c:e8:ce:8f:f8:51:f3:52:b4:
69:89:c9:fc:5d:72:96:d4:90:5a:52:99:08:9b:11:
eb:13:8b:60:57:80:24:96:a8:81:0b:2e:c0:03:5e:
43:22:3e:eb:07:e7:50:f1:11:09:81:c9:2a:1c:5b:
89:8c:41:12:30:c9:c4:ad:79:00:b5:c9:96:a3:dd:
e3:66:55:65:f0:95:10:95:3d:d6:8f:03:a2:9b:81:
85:cc:2b:72:bd:11:9c:64:16:8f:94:6f:0c:06:bd:
67:00:6d:16:91:fa:17:6f:01:cb:c5:c5:a9:ac:61:
d3:b2:b3:02:9f:1e:e4:a4:29:2e:f9:ec:99:72:da:
21:fe:a0:4a:29:b7:5b:99:47:c1:c5:b3:fe:d0:73:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.0.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a2:9e:6e:d4:d1:3e:54:a4:74:0d:ed:9a:be:9d:82:fa:08:
38:0a:05:56:6c:ea:91:80:2c:3c:a4:1b:08:f6:f5:02:8a:46:
5c:96:55:21:a3:7e:29:c6:50:d3:2a:4c:22:26:5a:00:13:50:
d5:e5:76:aa:ae:82:cd:21:6b:de:e9:fc:bd:aa:06:0d:d3:b2:
ed:4f:c9:bd:62:25:43:06:9a:1d:a6:23:b0:54:06:02:f0:77:
dd:0c:8f:de:99:16:63:35:a9:21:99:cb:4b:fc:bf:f1:16:a9:
91:4c:ba:54:d5:23:26:40:fb:3a:cb:ee:97:a3:26:7b:07:d7:
3d:bb:7c:31:3d:6b:f8:7e:59:f4:bd:f4:1a:ec:4a:d9:95:30:
5e:80:50:3e:3e:23:84:88:bf:80:a1:39:75:64:da:9e:04:f1:
42:39:5e:39:93:9c:83:a3:da:ab:b3:2f:53:3e:5f:fd:f6:1c:
1b:61:6c:17:7b:e4:30:01:5a:8a:63:94:69:c5:a6:06:59:46:
c2:6d:a7:69:70:e3:aa:a7:5c:45:9a:08:bf:7b:c9:da:61:a4:
c8:e7:d2:ec:d3:5d:eb:8f:d1:c1:b7:34:d6:fa:ce:c0:69:d3:
e6:67:62:a5:48:d5:85:5a:1d:cd:99:f5:ca:fc:b5:9b:8d:da:
b0:1c:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:59:13 2024 by rpki-client on console-ams.rpki-client.org