Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
File: 7sMTGXauon0XHGwmepjT84KmGio.cer (raw, json)
Hash identifier: bDta1cGJG7jGfJT1ftudBo4MKMK6ttlgNirRBJyrTms=
Subject key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC9850BE7A57E36E847CCADC12A4CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.101.120.0/23
IP: 193.102.58.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:98:50:be:7a:57:e3:6e:84:7c:ca:dc:12:a4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:42:14:e2:ca:1b:60:37:d6:32:98:b0:8f:
31:8e:3e:5d:12:ba:ae:48:b5:af:79:6a:4e:3d:8d:
c5:87:de:ba:45:63:fc:6c:88:2a:7c:1d:6e:31:f6:
56:cb:c3:27:47:0f:7a:13:a7:51:9a:b3:28:76:8c:
f8:98:65:dc:cb:50:96:d5:ce:c3:b7:2d:b7:94:65:
bd:9c:d1:fb:87:b1:6f:c4:54:84:d0:d2:a6:52:38:
0b:e1:44:ba:44:65:c4:9a:06:95:de:65:00:9b:d9:
c6:e9:06:df:9f:2e:8a:02:47:e9:0c:0a:e1:20:54:
e0:a3:6e:e8:86:d1:89:bb:ae:3a:79:26:53:c4:b1:
8c:e9:c5:5e:fa:11:cb:bb:ff:e0:24:6a:ca:c5:7c:
6e:99:06:76:e5:ba:3a:d3:05:9a:26:2f:8b:a4:0b:
d3:85:a6:87:91:af:c0:6e:23:f5:5e:04:ad:d6:a7:
5e:19:6e:16:38:f0:50:6e:2e:6e:4d:d9:35:e9:51:
bc:72:6a:a6:13:00:2e:c0:e4:82:79:35:28:c8:9f:
ed:33:21:41:b8:fc:fe:e1:14:58:24:c6:48:9f:30:
6a:16:56:9d:24:6e:c9:41:25:2a:a6:f5:e3:f5:e8:
99:80:e1:ef:81:4f:c3:a0:58:c2:1c:ab:1f:ae:0c:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.120.0/23
193.102.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f0:3e:9e:b4:e7:86:06:0f:24:47:c8:36:72:25:b2:e4:85:
bd:f6:8f:ab:dd:fc:1d:3b:aa:e9:1a:c2:43:ff:e2:30:50:b2:
48:9b:4d:e7:3f:c4:a6:d3:3b:a1:f8:32:5e:d0:c9:81:f4:2a:
ad:2a:ae:2b:d9:46:4b:0c:7d:be:f5:b1:fd:90:51:1d:e8:6b:
9e:85:f6:b9:40:e9:73:5a:43:03:55:e7:11:ae:1d:8a:fb:32:
f0:34:41:e0:76:32:67:bf:33:e9:62:28:58:4f:78:bc:0f:d5:
7b:ed:2d:82:33:34:14:6e:7d:f2:45:9c:c0:79:c7:34:45:0e:
d1:01:78:68:44:b1:91:35:a0:50:36:d6:2c:fe:06:48:6d:56:
15:32:a4:09:e9:9c:1b:e3:9b:d7:06:9b:13:8c:f6:d1:2f:9b:
30:ab:ba:24:32:13:34:b7:56:30:82:b7:d5:32:2d:28:55:d5:
cd:59:ae:06:23:18:71:28:5d:ca:a4:b3:16:2f:d3:bb:31:b5:
ed:15:14:aa:0d:f5:92:b2:31:84:35:e3:c0:b0:67:28:6c:69:
0b:7a:af:8c:9a:40:6e:39:ae:f7:4d:a7:b8:10:e2:53:fb:da:
8b:4d:aa:02:0d:10:eb:ca:9b:50:ce:e4:51:83:6b:dc:25:3b:
1a:a6:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:45:18 2024 by rpki-client on console-fra.rpki-client.org