Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer (raw, json)
Hash identifier: wATDm0TVrLa02HQUt/r4PZ6Z7OmDz8RRUmKodsqJIVw=
Subject key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB3D69C0221E7E7B8830DD4EBE76BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.111.240.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3d:69:c0:22:1e:7e:7b:88:30:dd:4e:be:76:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:a3:40:b4:3f:40:e5:c2:8c:66:64:23:c4:
32:6f:4f:5b:35:13:5c:f7:a1:79:d0:25:81:56:b7:
86:a0:55:11:36:d4:e4:e6:2b:21:74:50:f3:59:6c:
57:ec:2f:8d:07:b1:a1:ad:34:27:d2:b6:6c:93:73:
99:39:08:fe:a6:03:3a:07:95:82:f5:5f:fb:d2:ee:
19:bf:2f:91:90:d0:f1:ab:b6:e9:d7:73:7e:57:05:
db:37:e2:04:3c:81:53:3d:23:64:7c:c2:7d:dc:bd:
3f:e0:29:c1:34:91:58:11:13:65:02:5e:7e:5e:ea:
4b:43:d3:63:0c:ca:1b:8c:cd:06:fd:33:8b:b1:80:
dc:63:3d:02:5b:0f:1d:6c:e3:35:4b:55:98:76:b1:
89:09:c6:19:3c:bc:6f:16:a2:96:77:20:3e:ce:91:
83:fb:cf:cd:8a:4f:96:8c:54:51:e6:c0:2b:f6:86:
f7:ae:f4:10:d9:85:8c:cb:d0:2b:93:3f:9d:4d:57:
82:4a:a4:81:6a:77:1c:e9:8d:5f:18:8d:1d:65:7c:
5b:c6:5a:1e:57:a2:e6:df:58:cc:fb:b3:a0:78:61:
3c:a9:0a:e2:bf:d7:63:20:57:9d:d1:d3:8e:30:46:
94:61:23:ed:e7:80:80:37:84:cc:df:67:23:4c:c4:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.240.0/22
Signature Algorithm: sha256WithRSAEncryption
65:8e:bd:ac:65:41:54:8f:b4:71:ae:80:6a:0d:09:37:c9:5c:
2a:5b:f0:5b:f3:9e:ee:ee:a4:33:12:9a:c8:ae:c2:b0:0d:26:
f2:87:28:7d:06:a7:0d:3b:67:18:cf:c4:66:5e:38:8c:69:b1:
22:c6:3c:e1:b6:d2:12:0a:bd:7b:9c:13:87:a1:8c:e2:60:ef:
bd:1e:d8:0d:bb:12:af:f1:28:a9:99:3d:fc:1a:4d:a4:d1:e1:
7c:33:79:07:c6:e2:34:18:d2:e1:86:03:45:72:9c:82:27:9f:
6e:78:c4:e4:dd:49:45:bb:c7:04:24:7e:a5:42:ed:b3:cc:b1:
01:5e:2b:4a:ad:2c:44:fe:c3:2b:7f:7a:07:c3:fb:cd:40:c9:
3b:82:dd:64:b7:dd:28:4c:7c:40:bd:7d:2d:57:da:2c:ef:be:
35:3f:c7:87:56:e7:3e:93:30:93:b6:6c:d2:4d:78:50:8c:d0:
47:8c:11:1e:d2:95:68:a0:d8:f6:b3:bc:01:79:c4:c2:20:43:
89:cf:5d:d6:b4:53:1a:41:72:20:6c:36:2f:01:85:c9:46:bb:
f4:8b:12:a1:e0:10:d9:27:89:ee:5c:66:a1:53:cb:99:08:8b:
63:bf:b0:f2:d8:83:14:8b:85:4f:d2:f3:04:bf:28:a1:33:c6:
89:c4:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:25:39 2024 by rpki-client on console-ams.rpki-client.org