Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
File: 7YUEg8zhM3scbC_d6pxdu0p-GRo.cer (raw, json)
Hash identifier: sci90MRRnyUYG874WzCbkHkVz9RUbRu2G6Kqhy9v5DY=
Subject key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79501DB394D3C9FE5EF41BB8539EF8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.73.120.0/22
IP: 2a05:41c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:01:db:39:4d:3c:9f:e5:ef:41:bb:85:39:ef:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:63:7e:86:95:85:30:58:86:13:56:0c:a7:
1b:3c:42:1a:bd:aa:72:11:5a:58:2b:c8:f1:9e:83:
4e:f0:09:03:e5:64:5e:fe:2c:eb:6c:54:a3:5c:a4:
14:7e:ea:7c:f5:9b:84:ab:bb:2a:b8:98:f0:2c:8a:
ff:a7:48:10:ce:22:14:e1:5e:3d:e1:70:e0:58:b5:
5a:0a:35:3f:b9:64:32:d3:a8:c3:47:6e:ac:3c:84:
70:38:22:46:58:2e:d1:e1:7d:10:0e:60:40:f5:e6:
1f:37:f1:ea:15:9e:18:ad:e1:04:37:fd:19:ca:1f:
99:04:ed:3f:fe:13:68:76:97:df:40:c5:be:58:8b:
4e:2c:7f:2e:0a:0c:68:7c:be:25:c4:98:9b:83:0d:
3b:c1:7a:ee:8b:fe:b8:7f:09:7b:c1:3b:20:5f:da:
b8:8b:f2:15:e1:b1:22:de:25:b0:6d:0d:cc:6b:c7:
9b:8e:6c:e0:99:0f:19:9c:a1:30:0f:db:c1:ae:6c:
80:27:52:c1:3a:b6:4e:87:84:f1:a1:3e:2f:c7:47:
cb:89:d2:d3:6a:ad:fb:4f:f3:19:b5:67:ba:fc:b5:
27:a3:83:45:db:1f:2b:f5:c9:87:93:bf:e2:f9:6e:
4a:63:1a:55:77:0d:23:7f:25:85:2f:fb:fa:67:77:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.120.0/22
IPv6:
2a05:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:fc:76:53:11:b5:ef:72:af:25:4e:63:69:f9:1c:b6:91:57:
e9:3d:b8:cf:ad:5f:57:7c:15:17:b3:ae:d3:1f:1a:0c:fe:fe:
97:b3:92:fe:4d:6d:fa:12:d7:51:07:8a:e2:6f:41:40:13:56:
d7:d8:52:22:25:7c:c3:bc:50:33:65:a1:eb:68:cf:03:99:07:
14:a7:93:d6:04:34:e3:53:a6:3f:d9:b7:b8:51:64:95:e1:6f:
43:00:7c:68:a6:60:17:3b:96:cd:5e:9b:7a:76:51:84:8b:65:
fa:e9:bb:cb:b4:d1:56:38:f3:cb:fa:6f:c1:b4:77:bc:8f:6d:
a7:0c:ef:73:f1:33:84:b6:2f:28:4b:f9:98:f8:8c:71:ce:26:
c1:20:a0:61:3e:e0:94:10:34:60:bf:d1:23:ff:ec:99:69:a5:
80:f3:b0:cc:c5:87:c7:85:b7:3c:15:09:b7:80:3f:83:cb:ea:
64:d5:fd:d1:59:52:ea:1d:84:d4:fa:ff:58:d6:4a:d2:f0:10:
15:db:5d:ca:41:83:de:18:55:63:a0:55:e7:92:2e:c8:6c:a1:
98:b1:12:b1:18:5f:b8:14:98:96:e5:35:fc:e0:ab:e0:26:27:
1e:57:56:81:1e:bf:74:10:9c:84:cc:61:8a:96:1e:ef:39:0a:
c5:a9:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:43:51 2024 by rpki-client on console-ams.rpki-client.org