Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
File: 61eixgC2ngu67ixomWeS9ihqv-c.cer (raw, json)
Hash identifier: KNypdzDBFmkOv21k1juMsEw2AM05Zy9gUZ72Djq5om4=
Subject key identifier: EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC22928C0367375B307C914EF45BD842C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Apr 2024 09:21:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.212.216.0/24
IP: 2a0e:a780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:29:28:c0:36:73:75:b3:07:c9:14:ef:45:bd:84:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 09:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:c9:37:a2:95:3f:bb:3a:89:7a:a9:78:66:
f2:90:9f:91:c1:0e:ff:6d:8f:5c:79:f2:b7:47:18:
d6:7e:c4:b2:a8:07:eb:ea:3e:31:eb:2c:ba:c2:3d:
1c:b8:23:08:7e:f3:48:b8:82:66:e7:1d:2d:9d:f7:
1f:f8:7d:8e:32:36:d3:38:6c:a0:e0:2f:7a:ef:95:
c8:80:54:01:7c:ed:5e:87:c9:fe:0d:14:fe:91:fa:
9a:aa:fb:e1:50:5a:53:dc:12:ec:7c:1b:18:5c:62:
00:b2:90:20:3a:b7:db:87:c7:75:8a:40:f1:bb:56:
f1:af:49:37:58:fd:2e:b0:15:b4:59:70:62:0f:a1:
c0:47:99:fd:88:06:23:00:7b:84:9a:42:34:7f:55:
0d:73:78:58:f5:d4:38:48:6f:90:30:cc:5e:bb:04:
4f:f4:3c:9d:de:c2:3b:15:43:95:c1:37:f5:ab:fc:
54:78:46:17:a7:b7:45:0a:b6:63:f6:02:f4:d9:7c:
8c:82:4f:e1:98:18:d8:c5:55:ad:28:28:9d:2e:5d:
5f:03:7f:50:78:13:8a:39:b4:87:73:93:4f:85:26:
c9:7f:c7:35:1d:fc:88:8f:7c:fb:79:3e:17:7d:50:
ff:a8:74:a2:1d:cf:82:5b:7a:5b:92:82:44:a9:78:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.216.0/24
IPv6:
2a0e:a780::/29
Signature Algorithm: sha256WithRSAEncryption
1f:f9:ae:0b:94:bf:bd:52:6f:d3:e6:db:65:b1:2e:67:26:11:
e8:18:d2:0d:79:bb:50:92:a9:99:99:61:3e:99:ec:80:5f:c5:
32:d3:bd:57:14:d9:e7:aa:7e:3b:c7:37:5f:b6:12:0e:98:39:
72:72:4c:26:a3:9c:e9:db:6d:89:a4:f4:a6:36:13:fb:5a:67:
d2:54:e4:a1:8b:19:9c:bd:a7:1b:6c:b6:70:4e:d5:f3:6a:33:
3d:b2:d2:74:95:e7:cc:5a:f8:81:7c:14:03:6d:e5:da:b7:a2:
f7:71:b6:02:fa:c1:2e:f3:bf:e7:60:6b:2a:64:be:51:52:4d:
15:06:99:f2:84:e3:a2:40:7f:05:c8:e2:ab:1b:48:75:94:57:
04:18:71:28:26:f7:93:af:99:b2:9c:f0:79:a5:09:48:1f:4c:
20:ec:da:f1:5d:ee:fa:b9:0d:a2:c5:62:fa:ba:88:73:20:c1:
a8:cc:f8:3f:c9:ea:4f:c1:78:5c:7b:0a:f9:65:a7:da:45:06:
31:da:f7:92:28:05:59:64:9a:43:49:4d:3f:64:64:3d:99:6d:
f9:4f:c3:cc:33:41:5e:c1:27:93:fd:e0:fc:34:6e:f8:72:ea:
39:55:db:21:9f:2f:55:97:04:98:3c:db:8a:f2:67:f0:55:2b:
e3:83:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:20:00 2024 by rpki-client on console-fra.rpki-client.org