Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.cer (raw, json)
Hash identifier: lWSVzCASaPKm7g/cnK4SpIRh8TyG15CIj4KfBRA9Tr4=
Subject key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7954AC948534978CDC68231CE4683CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.33.92.0/22
IP: 2a00:cc60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4a:c9:48:53:49:78:cd:c6:82:31:ce:46:83:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:18:36:8f:ae:73:e2:80:2d:2d:2c:7e:9f:
0f:a4:98:fb:6e:d2:45:04:1a:e0:2f:09:5c:01:62:
ef:7c:71:7c:da:7b:61:72:10:ff:a7:05:92:1f:70:
eb:f9:5f:30:ae:14:7e:79:e7:db:f3:ab:8a:2e:ec:
56:29:9e:6f:61:51:55:b8:af:a0:b9:1d:39:56:fb:
96:9c:87:85:72:f4:95:24:1d:b5:3e:bd:c8:39:fe:
c6:26:60:7e:07:1b:68:ec:ee:08:de:9b:d5:b4:b3:
8b:b6:24:f2:c5:7b:db:6e:8e:12:de:06:a7:55:30:
f6:2f:41:25:e7:ac:f0:36:a3:b0:e3:13:dd:e6:94:
38:5b:45:4b:bd:3b:be:8a:67:17:30:2c:c3:23:27:
5a:be:f3:db:8a:ae:db:7b:f8:27:f7:90:7f:44:df:
b2:eb:56:13:e7:86:b4:31:b8:5d:12:25:b8:ca:fb:
d8:3e:ed:0f:c5:46:a8:ba:9e:a9:6f:4b:21:f3:2e:
54:75:2a:72:22:c5:12:f0:0e:77:e4:4a:80:3c:7e:
c8:26:aa:bd:99:c6:68:1c:a0:07:b7:d6:c8:fb:fd:
c1:3d:25:c8:65:02:80:14:a0:62:e3:c5:45:c1:2c:
d9:da:10:16:a9:9b:44:07:51:44:2b:61:f4:dd:8d:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.92.0/22
IPv6:
2a00:cc60::/32
Signature Algorithm: sha256WithRSAEncryption
53:b6:fa:73:9c:8f:6c:ee:ba:ff:d5:1f:99:b3:74:50:6d:6e:
98:69:df:df:e4:90:da:00:70:80:48:d7:03:fa:9d:57:c3:d1:
d0:46:d6:ee:94:88:de:5d:47:d5:71:f5:07:98:fd:97:fc:a2:
15:53:f3:98:df:2a:6d:ae:f5:40:b3:09:62:f3:e8:7e:cb:44:
b7:11:de:85:d5:5d:a8:23:14:e5:a6:a8:ad:ad:45:aa:6a:dd:
ed:d9:37:ec:32:ee:d8:06:39:ac:3e:9e:61:3b:8f:9e:fb:46:
ad:50:8a:40:bb:00:71:19:24:12:14:69:9e:b7:67:65:a6:9b:
17:09:5f:b3:3a:1d:7d:74:26:cd:c3:d5:a8:9a:57:fd:b4:3e:
95:bf:4e:17:59:78:e3:ed:1d:e9:17:ce:fc:48:a9:c8:f1:02:
e3:b9:d3:b1:c0:b6:2f:de:fc:59:52:64:e4:e1:53:e7:0c:fc:
e4:0a:83:4e:cc:7c:17:c4:71:d8:69:06:89:15:0a:ad:db:2b:
57:c0:70:07:a4:06:24:3f:e9:d1:3c:ff:3d:07:c9:d1:cf:45:
8f:e5:76:46:12:14:b9:78:a8:a5:1a:76:47:b4:24:9a:91:52:
77:24:bc:91:1c:04:bc:5e:7c:32:82:07:a3:68:03:6a:fc:20:
a1:05:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:40:24 2024 by rpki-client on console-ams.rpki-client.org