Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5vr8o3IPk8fRgPNDAnCTYwrXwa4.cer
File: 5vr8o3IPk8fRgPNDAnCTYwrXwa4.cer (raw, json)
Hash identifier: nQbk1PLjJUsw+9CAbnj81qJqKDKZmmugDeKUC9gOPro=
Subject key identifier: E6:FA:FC:A3:72:0F:93:C7:D1:80:F3:43:02:70:93:63:0A:D7:C1:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793E38E8285AC48593BE70D75237536
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/d36e35-abbd-4c1d-805a-b21fb4de24b0/1/5vr8o3IPk8fRgPNDAnCTYwrXwa4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/d36e35-abbd-4c1d-805a-b21fb4de24b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.187.0.0/24
IP: 193.221.121.0/24
IP: 193.228.144.0/24
IP: 194.153.116.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e3:8e:82:85:ac:48:59:3b:e7:0d:75:23:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6fafca3720f93c7d180f343027093630ad7c1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:13:ed:c1:b7:16:04:5f:2b:c1:21:f0:60:
c9:c3:52:f3:a2:a0:ab:33:87:26:f6:be:cc:98:b5:
5b:45:81:ed:1f:ed:b7:b7:da:cb:cd:11:2b:76:bf:
21:fa:d9:a5:20:50:ac:02:86:7a:ab:09:52:b0:5b:
d8:1f:52:19:5d:de:9f:71:a8:5f:e4:5e:79:dc:b1:
f7:9c:d8:ad:60:c4:38:00:e9:01:04:d5:3a:e8:e1:
d5:62:a7:2a:6b:19:a1:28:5c:8a:b6:e6:a8:0e:61:
b7:b0:da:7f:b0:4f:09:ff:9e:a3:e6:a8:2a:7b:3a:
32:fb:5d:3a:47:0b:77:1d:1c:5b:d6:61:16:44:cf:
5e:4c:c3:6b:84:79:94:9b:d8:ff:5a:70:18:32:25:
b6:0f:6d:53:a8:9f:7c:9a:45:37:d4:8e:e3:b2:6d:
12:28:f7:0e:d4:62:5c:bb:82:24:30:ca:df:fb:82:
c6:28:72:51:08:51:a6:94:7e:60:a0:c7:b3:ee:7f:
72:f3:f6:6e:34:53:2f:74:ed:ca:9f:37:86:a6:ef:
d1:50:eb:0c:ef:9f:f2:14:1e:5a:24:dc:d1:fd:ec:
a4:6f:bc:47:88:d4:69:5d:0e:42:86:d0:7f:a2:90:
83:76:2c:81:e1:fd:00:dc:6c:9e:51:7f:43:aa:a7:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FA:FC:A3:72:0F:93:C7:D1:80:F3:43:02:70:93:63:0A:D7:C1:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d36e35-abbd-4c1d-805a-b21fb4de24b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d36e35-abbd-4c1d-805a-b21fb4de24b0/1/5vr8o3IPk8fRgPNDAnCTYwrXwa4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.0.0/24
193.221.121.0/24
193.228.144.0/24
194.153.116.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e5:b7:86:1d:12:b5:e4:6d:8b:08:09:0d:ce:08:30:d4:e5:
8a:8c:a9:14:1c:21:62:5d:c8:83:0c:ea:46:96:3d:52:52:12:
cb:f2:f1:c6:d7:b1:56:04:98:b9:24:c6:58:72:a2:e8:77:bc:
79:dd:3b:74:6f:4c:91:35:00:ed:db:ec:08:41:fb:7b:57:91:
d2:23:47:0b:9c:ad:a5:01:d9:74:b8:9c:44:22:0c:47:51:42:
8c:92:a4:d1:4b:07:9c:58:36:27:87:c5:07:93:22:cd:b9:db:
b9:4f:d7:f4:ee:6f:57:da:33:92:83:ee:4d:79:9d:a1:ef:37:
72:f2:c0:ef:e3:a9:69:9d:3a:7b:3c:8d:a1:53:40:3e:29:cb:
da:ac:51:e6:3c:ed:54:39:bf:60:f7:07:8c:e4:f6:5b:34:0d:
7b:0e:29:10:b8:14:10:bb:4e:26:17:7a:cd:ad:68:b6:91:d7:
69:7f:d5:8e:d4:41:f5:50:5f:4f:a7:7f:e5:51:0b:14:46:ca:
fd:d4:7b:4c:21:dc:ff:80:24:3e:0a:7d:cc:f0:fd:29:32:61:
6f:cf:5a:89:0b:74:d9:35:e3:7d:f6:4c:02:48:9a:bc:23:ca:
99:65:ca:1e:99:93:9a:00:1f:c5:88:79:27:6d:7f:20:95:cd:
c5:81:0b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 10:07:43 2024 by rpki-client on console-ams.rpki-client.org