Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
File: 6P36cUAM43C3X3N3gEhXTkYnQxs.cer (raw, json)
Hash identifier: YVQ3qnPZvPhHaxgd+gF/suV+7gyhjSlNdB8L7H/hH/o=
Subject key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01933F08330A77AD829F9C8D63F85F2DEAAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Nov 2024 11:28:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.112.79.0/24
IP: 185.247.124.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:08:33:0a:77:ad:82:9f:9c:8d:63:f8:5f:2d:ea:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 18 11:28:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8fdfa71400ce370b75f73778048574e4627431b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:59:62:19:bb:8f:12:23:75:02:fc:4a:9c:
2a:24:27:0a:10:95:04:36:69:e0:f1:88:36:f1:97:
28:f5:07:c9:a4:b6:2d:0a:d9:a5:b2:7f:a3:aa:b0:
0c:b8:36:54:a3:4c:73:1d:87:52:bd:ea:61:2b:29:
29:74:57:56:a9:81:57:eb:48:ac:4c:b9:4f:8d:4e:
f2:2d:0c:21:ad:ca:1c:0e:63:e8:90:14:f5:56:3d:
a6:39:b2:97:d7:9f:ac:72:d7:ba:18:8a:ab:e8:13:
02:ed:38:82:1d:5d:9d:cb:52:21:1e:b5:b2:be:75:
3f:46:c9:9d:6e:db:c2:fd:7b:76:6d:d4:e8:a2:4a:
1a:dd:80:d6:72:a1:1b:38:77:f2:03:90:2a:b2:d8:
6d:25:f0:c3:18:be:5d:a2:9a:ea:65:e1:c6:be:8f:
3c:25:f4:0f:71:fd:8f:96:2e:fa:ba:9c:f1:35:e6:
c2:d4:61:62:5f:d6:f9:07:b6:f3:43:f6:62:84:20:
db:ca:9a:1a:fe:f1:88:26:fa:7c:e6:bb:cd:3c:6b:
da:d3:b4:a0:82:00:a3:b6:91:2a:76:a8:71:f9:8a:
55:11:cc:eb:bb:a6:70:d4:fa:ad:c0:8d:49:26:6e:
b3:c6:45:5f:d6:30:cb:5a:dc:e4:0e:bd:91:18:bb:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.79.0/24
185.247.124.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ae:32:06:ad:c6:4c:05:f5:7e:64:ce:b0:ea:dd:8c:b7:0b:
2e:a0:e9:34:fc:33:38:d0:9d:cd:2e:62:a0:5b:e3:98:63:6c:
8d:5a:09:f3:c2:8a:58:67:52:03:ff:00:37:42:8d:12:16:2b:
c4:8a:58:fd:fe:6f:1d:af:4c:2e:78:45:ef:3b:e6:55:a7:5d:
3b:e7:9c:19:e6:82:a5:c2:87:c0:16:e9:c0:33:ec:39:7e:b6:
b5:4d:13:ab:a9:5e:26:7a:f0:88:4c:e9:c5:09:16:1b:c3:a8:
58:b1:fc:9a:99:7c:28:26:1e:e3:f7:82:75:5f:c0:4c:27:19:
ef:c9:0a:28:bd:04:21:52:c4:45:f1:41:ba:42:8d:c3:dd:f5:
68:ff:df:a2:90:9d:90:86:10:6a:2c:d4:26:2e:63:ac:a3:7b:
ce:d9:c1:9a:f3:64:60:c2:97:b9:72:c7:3b:c0:f1:f8:37:62:
0d:ad:48:91:32:49:08:d7:71:70:8d:0a:3d:9f:a6:5d:20:df:
63:82:9c:88:32:02:59:10:cd:fa:44:18:0c:f7:08:db:33:e4:
d7:9f:5c:b2:02:ae:99:c2:66:49:11:54:a1:2b:57:21:96:9c:
2f:34:09:76:c7:c6:b6:f0:c8:16:1f:00:4b:3f:84:08:ba:bc:
7e:b7:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:17 2024 by rpki-client on console-ams.rpki-client.org