Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
File: 7JJpGF9j3DNWA39xPOigkJ_wciU.cer (raw, json)
Hash identifier: VoBMznwaQn1g9s2wgj4aTMUM1qlh0r1s0w/n88BDg34=
Subject key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B356D11E6DC8E5825E2544932B36B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.144.20.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:35:6d:11:e6:dc:8e:58:25:e2:54:49:32:b3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec9269185f63dc3356037f713ce8a0909ff07225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:bd:01:ec:a3:ae:a4:01:2b:cb:48:c8:21:
df:cd:0e:47:b5:7c:3c:e7:27:e5:07:a9:41:6c:61:
a6:e0:04:12:48:01:bc:a5:42:45:18:a6:84:17:52:
2e:8b:7e:45:df:5e:83:16:19:2c:cc:d0:77:98:c5:
49:a3:0a:31:a6:35:60:7a:ef:63:23:29:8d:61:62:
29:71:42:aa:86:24:27:42:ed:3b:04:57:1a:10:d4:
da:56:ba:9c:2e:b4:4f:c1:c5:0e:82:98:c6:11:43:
d8:d8:4b:70:ec:99:08:0b:f2:be:a5:d0:7c:8c:12:
99:c4:15:52:a4:5e:93:6b:83:d4:ca:1a:30:fb:30:
92:f2:95:4d:51:43:79:fa:58:64:ad:27:c4:0a:a8:
f3:57:cc:d4:17:34:1c:58:ac:69:df:71:4a:fe:fa:
4b:29:ab:0c:4c:1a:f7:59:3e:f3:74:a7:ea:2f:2e:
27:45:ee:f4:8d:69:d7:b5:22:20:eb:89:6f:85:31:
ec:06:32:9b:31:46:c9:2e:ec:11:0a:4b:96:d2:5f:
12:88:5c:d9:dc:09:84:4d:11:e0:b7:84:4e:e3:ea:
45:75:1d:8a:e1:0b:da:e6:27:90:ec:ca:bb:5d:1c:
d2:43:cd:02:d5:40:57:2e:e3:11:b2:c9:48:1f:21:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.20.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a8:a1:65:15:78:5e:af:f8:f0:99:f1:bb:4e:82:bd:63:c7:
bc:2d:9c:40:80:91:f8:f2:38:ce:e5:0a:91:db:5c:b3:9d:50:
4b:7f:0a:02:33:89:74:97:d7:65:f9:8b:a4:d7:11:22:92:0b:
4b:2f:e1:4f:1e:dc:fb:4e:26:2e:3e:ef:12:90:d8:fd:49:61:
40:04:f8:15:d0:cc:11:3d:6e:6a:1c:7d:6f:72:9d:6e:79:b2:
b7:00:b7:23:40:be:33:15:6b:c6:12:38:ff:63:97:17:d9:25:
a1:a4:5d:cc:d3:fe:06:da:e1:d8:25:4e:94:78:0d:9c:6d:86:
f8:f8:82:f8:3f:21:ab:c7:73:fd:99:2e:33:53:ea:2b:20:98:
15:2e:6f:b3:82:29:7c:54:c6:4a:20:43:98:9f:f9:a9:a0:9f:
f5:c3:2f:b3:ce:2c:95:45:2f:79:56:1e:3e:57:92:62:01:54:
72:b3:78:3e:65:4e:46:aa:0d:ad:0d:3d:fc:82:ff:72:4b:c4:
0b:69:77:1a:8b:f9:cd:dd:3e:7e:b1:c3:1e:8c:d9:39:d5:69:
99:0f:34:18:5f:c4:41:56:71:cd:60:3c:14:21:41:36:60:5b:
d4:7e:d3:d5:da:2a:c8:73:4f:ca:b1:eb:06:66:e3:f4:15:75:
79:2d:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:10:37 2024 by rpki-client on console-fra.rpki-client.org