Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.cer (raw, json)
Hash identifier: DCU5hXYxPkcXnNHq5DxPzN32d2ocAoH3PbIhbyvSgh8=
Subject key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727568C38F047B7F62E855DCB02AA3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.246.100.0/22
IP: 2a0d:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:56:8c:38:f0:47:b7:f6:2e:85:5d:cb:02:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:1e:e2:fa:de:76:fd:52:94:13:df:9d:0b:
4f:ce:da:d7:bf:90:d1:d0:be:82:e3:da:44:8a:a7:
3a:11:73:47:b2:33:4f:70:e1:ca:5b:21:18:2c:99:
26:f9:dc:aa:65:b0:55:59:90:1d:8a:24:69:ef:37:
2d:b9:75:76:f5:f4:9e:4d:31:5b:5e:6d:16:b8:f7:
09:54:2c:21:97:2c:fd:33:28:72:63:3c:75:76:d1:
36:9d:f2:fa:d7:e1:cb:dd:09:28:7c:9f:c7:13:6b:
1e:54:bc:c3:db:57:5f:69:95:c5:bd:b6:64:43:26:
b6:15:64:1f:f6:0d:29:b1:b4:68:e0:0c:42:c6:05:
ed:13:ba:02:bd:5d:15:4a:58:bc:9f:6b:94:67:6c:
e4:00:52:ea:dd:75:5c:61:fe:90:69:a4:64:1e:fb:
7a:5d:1d:35:fc:d1:1d:ed:19:8b:bc:7d:5e:6c:15:
c0:fd:9a:5d:a3:2c:4f:50:49:58:42:11:e5:cf:24:
2e:4b:4c:ef:1b:63:82:97:3f:0c:17:1f:dd:94:0d:
2b:e1:2c:f8:76:63:ad:29:d4:77:48:2c:30:9a:c2:
02:54:f3:0b:dd:b5:6e:ec:3f:85:40:9b:aa:39:d1:
b5:a3:6a:32:1e:fd:54:95:7b:ee:83:c7:da:9a:f2:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.100.0/22
IPv6:
2a0d:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
73:11:4b:d5:c7:2d:00:52:73:f6:55:7f:d6:1b:4d:92:6b:24:
ee:6b:e4:3c:41:70:0a:82:08:0e:cd:21:6e:6a:bc:0e:8f:25:
4f:ca:52:0d:13:41:e1:b0:2d:f1:83:47:e6:99:16:16:7b:07:
cc:de:64:68:e9:f0:d9:07:60:7a:df:4e:bd:73:44:82:38:d9:
e4:b2:0f:f5:e8:32:93:ed:5d:e1:8e:06:d2:71:bc:54:38:b0:
85:04:f6:1e:48:aa:71:1c:69:bf:ae:43:be:ce:29:06:26:0d:
fa:6c:47:a8:ba:19:9e:42:a1:1a:2b:6b:f5:7c:dc:75:43:34:
13:77:9a:44:c0:71:21:02:7b:d0:71:d2:0e:4a:d0:86:80:f7:
c1:ab:a9:93:bd:a8:33:11:fb:71:3f:e0:aa:c8:93:f6:ba:96:
83:45:8c:b0:db:3b:ca:0d:61:26:78:aa:7f:33:23:60:3a:f2:
30:04:63:df:ab:05:1e:58:3c:ce:0e:2e:49:c8:7f:76:c3:74:
5e:c9:49:0c:93:8e:fb:f4:46:b5:5a:5c:21:b9:e7:09:cd:7f:
4d:4a:2d:99:7d:70:b3:fb:0d:81:99:a1:70:28:23:63:64:49:
4c:46:12:d6:82:8f:b1:a5:1b:a0:dc:71:07:47:f6:37:af:88:
87:0b:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 18:55:43 2024 by rpki-client on console-fra.rpki-client.org