Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
File: 6fRRBEShet1zJxRhUpQ0lauruWg.cer (raw, json)
Hash identifier: DzvFsIKtgfpqpe6pDhPALK/VFcp0Uk9nQRo/imM0kJo=
Subject key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E7418CC7B0862BE0470DB3C7731FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.168.143.0/24
IP: 2a0d:ec00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:74:18:cc:7b:08:62:be:04:70:db:3c:77:31:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9f4510444a17add7327146152943495ababb968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:8e:80:19:61:b6:61:6b:8c:1a:4a:a8:da:
4a:fa:20:23:42:32:d0:41:54:ae:62:89:52:54:ca:
7e:66:ba:41:30:0f:b3:d9:2e:59:34:de:a9:d0:fb:
84:f4:eb:09:2a:49:26:c2:36:96:a0:bc:89:67:2d:
35:e0:21:d2:fb:46:7f:24:2a:6d:6a:19:1a:a6:5f:
e3:f6:eb:3f:50:2c:8b:66:98:21:55:63:5f:9d:33:
7e:39:44:02:f3:e0:6b:dd:c3:4f:0c:58:71:00:9d:
70:2c:59:ea:f1:76:83:3e:5d:e9:32:37:77:fb:14:
a8:91:d3:12:2f:8c:24:f5:2e:7c:f9:15:32:93:ec:
d3:c8:25:65:ce:a3:8b:d4:5a:ef:c4:63:0f:06:27:
ef:91:76:b5:3a:6d:6b:4d:cd:ff:af:92:5d:0a:26:
18:0b:71:ab:f5:f6:9f:e5:03:e5:3e:0f:6c:ab:23:
fc:97:49:4f:23:86:df:f8:34:53:81:64:13:28:17:
7b:e4:15:aa:bc:82:65:f5:75:71:af:99:4e:fc:e7:
bd:db:52:bf:3a:03:60:b3:69:2d:4e:23:c0:59:64:
c9:80:5a:70:f6:85:20:f4:84:12:91:38:a5:43:95:
f5:b2:ee:bb:59:fa:85:99:56:9f:5e:6c:fb:aa:e9:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.143.0/24
IPv6:
2a0d:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
88:0f:2d:82:7e:12:82:f1:98:c0:d2:b7:c0:3a:24:a6:61:12:
5f:cb:1a:ed:cc:8a:2e:43:cd:19:12:64:54:3a:2c:6c:e9:ef:
3b:09:e2:44:8d:8a:f1:98:cb:9f:fe:3b:25:11:b0:1d:85:63:
3f:99:47:22:ea:95:95:53:dc:4d:34:c2:68:56:3e:f8:bc:6c:
9f:f1:18:16:79:f2:72:08:ac:20:cf:91:15:21:42:6a:b1:98:
0c:b7:03:75:41:6a:5a:38:08:fb:c0:d0:13:90:c1:61:b6:f0:
e9:c1:89:1b:7b:72:53:2f:52:18:ca:c1:9f:58:9c:72:48:54:
53:61:6b:15:5b:ae:76:9a:d0:23:9f:20:0c:e4:97:8e:a9:0f:
ff:d5:67:7b:60:cd:78:63:23:d9:13:0a:aa:2e:22:bb:2c:9c:
f2:a6:ba:e9:32:d0:c0:f4:04:66:ad:8a:a3:3e:73:25:fa:4b:
4d:e6:df:a3:78:a6:f2:98:52:bc:0e:99:46:3e:c4:a6:1c:e3:
c4:5e:28:74:eb:a1:ce:51:7e:50:88:90:19:7f:54:ba:45:ba:
33:9f:02:a9:46:2d:67:f8:3c:06:34:db:17:e9:48:83:75:0f:
80:2a:0b:46:9f:6d:b4:fd:f4:6c:aa:04:6e:73:39:1b:c5:a1:
49:57:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:00:34 2024 by rpki-client on console-fra.rpki-client.org