Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
File: 7rkpOOqM96P2CZym1uPlonuJfPA.cer (raw, json)
Hash identifier: ySWgMHAOwO1TDB+C79IdLl1o7c2xTj6sn9ent5W5oLU=
Subject key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF39452ED0FAD3C91FADD6C650F26E312
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jan 2024 13:33:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:29e0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:94:52:ed:0f:ad:3c:91:fa:dd:6c:65:0f:26:e3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 13:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:a9:00:c6:4e:98:5f:70:80:0f:2c:4c:56:
50:f9:f6:36:cd:ef:c1:c7:bc:6e:0c:10:f0:05:bd:
56:83:39:59:8d:d7:98:9c:52:ac:65:77:8b:87:8e:
12:e8:cf:08:e8:bc:f7:b8:eb:88:b5:4d:74:8b:a9:
14:23:03:41:87:47:ea:76:46:d5:5b:07:e6:09:cf:
83:bf:38:97:68:3c:99:00:da:53:ce:3a:ed:af:7d:
0d:81:5e:6b:bd:be:13:b0:c0:71:01:c5:0f:67:3e:
3e:71:9b:04:a2:65:58:b2:8b:50:df:ae:2e:2e:bc:
0e:ce:40:00:d4:6c:3e:0f:bd:e9:8a:c4:4c:48:73:
51:87:2c:54:8f:4d:b7:e8:94:56:a1:21:a7:b9:a1:
8d:bf:df:bd:42:2b:bb:18:9c:af:92:7e:ce:ff:d1:
5e:ec:a4:da:21:22:dc:4a:2f:b7:10:46:01:8c:a0:
b3:7c:94:a3:9a:ee:1f:f5:75:86:7c:83:ff:b5:95:
47:49:4a:a8:51:87:b9:c0:44:74:57:33:0d:e4:cd:
f4:6d:f0:ae:34:9d:f4:32:4d:50:5f:d5:57:1c:6c:
c3:7b:21:07:58:cb:d2:90:88:bf:f5:bb:83:9c:95:
fe:0f:83:16:43:84:bd:b7:d8:27:b1:81:89:80:71:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:29e0::/48
Signature Algorithm: sha256WithRSAEncryption
ad:3e:14:a5:5d:76:66:38:39:61:24:46:e0:5f:ab:ad:79:d6:
37:10:fc:4b:ae:36:25:fa:46:8a:8c:7f:2a:a5:5b:d9:36:50:
26:0e:46:06:db:9d:6a:8a:18:56:42:ea:ce:52:68:a6:49:06:
ab:fb:0a:ad:af:86:0d:11:14:47:0b:97:56:12:30:d6:82:58:
a9:52:4c:c1:18:41:bb:f6:13:66:78:a8:78:1a:65:4b:56:f1:
b7:38:6e:04:9a:42:99:a8:01:6a:75:05:8a:7b:41:1c:7b:7f:
a8:57:12:4d:e5:a9:e6:3d:99:99:5a:06:22:aa:27:84:9d:69:
68:24:db:f7:27:8c:2a:8e:85:a1:a6:f2:ae:52:5c:6a:3d:b3:
5f:6b:40:41:53:a3:ab:5b:30:0c:6b:d6:c9:db:44:c3:d3:64:
0f:be:8b:6f:e3:12:5b:14:47:0c:f6:36:d8:dd:be:54:ce:c7:
65:a5:b2:c4:54:30:35:3f:17:3d:73:2f:ea:11:8f:1f:13:97:
4d:a9:55:29:67:44:fb:96:d6:4b:2c:d1:74:e4:84:38:73:76:
3e:0b:c3:f8:85:2a:c6:9c:4f:fe:75:87:56:e5:eb:0b:97:5f:
62:60:99:a6:3c:8a:63:3b:4c:1b:ab:e9:5f:c8:58:6e:f3:c7:
f0:50:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:50:25 2024 by rpki-client on console-fra.rpki-client.org