Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
File: 8-jxxmLMi02PemBlEgmeq34dOHk.cer (raw, json)
Hash identifier: ozbIUgtzq+UwkAG0Iw2OqIF3tyFiL/l14l4EsnIn+5g=
Subject key identifier: F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE3169C06E3275EBABC6F7471CD15C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.198.87.0/24
IP: 2001:67c:2390::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:31:69:c0:6e:32:75:eb:ab:c6:f7:47:1c:d1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:c8:f6:f2:9d:84:38:60:7a:76:7b:3d:2d:
12:ad:71:92:ca:76:25:a3:5b:62:84:2c:7d:20:47:
7d:06:47:88:9c:99:8d:b1:d6:aa:9f:ef:69:36:a1:
1c:72:29:4f:c6:75:73:3c:86:65:4a:bd:e1:4a:5b:
ea:59:ed:bc:3a:cd:6c:56:57:60:47:6a:ea:da:64:
12:a5:bd:2a:37:7f:71:a0:06:8c:6a:ef:06:a6:31:
68:dd:dc:2f:26:d2:43:f2:ca:20:00:b0:62:79:27:
e3:98:93:8b:b5:0e:2b:f9:ef:d3:58:08:b3:15:5b:
74:82:52:d3:ef:10:46:82:6a:75:24:c6:3b:6f:ed:
12:9d:c5:cc:26:48:1f:25:f2:f4:e7:f2:a5:2d:62:
50:5e:7e:17:c0:dc:6e:d1:2d:72:ba:68:cb:34:02:
08:70:d3:ee:22:73:2a:6e:25:1f:9e:99:43:41:2c:
c7:d1:8e:bd:b8:2a:a3:09:2f:fc:01:32:1a:4b:6d:
dd:d1:12:7d:eb:bd:63:f5:f5:b8:af:3a:65:15:b5:
53:4b:39:7a:6d:f4:3a:2a:d4:0f:61:64:3f:09:1c:
48:52:67:54:45:92:6d:f7:5c:01:2f:76:45:57:8c:
bc:1c:25:ef:0d:68:17:de:3a:9e:26:75:cd:8b:f0:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.87.0/24
IPv6:
2001:67c:2390::/48
Signature Algorithm: sha256WithRSAEncryption
74:19:3e:4f:a8:fa:7d:ee:a8:f2:9d:1f:35:e1:1f:19:0e:69:
ac:e6:a6:44:50:60:08:c7:0b:4d:a2:be:16:08:94:f6:35:82:
f3:81:71:8d:1f:c7:b3:71:53:aa:0a:e1:c7:49:ed:87:0d:b7:
72:f6:34:92:76:3b:4d:3b:dc:fd:b2:1f:28:62:e4:93:0a:84:
40:ac:54:d7:51:fa:f0:53:ad:b8:0c:f8:ee:f3:70:f8:a6:b6:
70:ff:df:21:32:93:38:44:83:24:6a:28:9f:ed:4e:d6:7d:23:
1d:8c:9c:a1:15:a2:72:b3:0e:ab:c1:16:3e:bd:a2:4c:3c:c5:
d6:17:5a:d7:5c:11:84:4e:ef:05:d9:7a:f7:5d:36:9e:a2:ba:
f0:0b:66:37:f6:c5:1b:0f:a1:b8:45:2a:79:0b:5e:cd:2f:6f:
39:92:30:76:3b:aa:2d:16:73:0f:b8:c3:fa:5c:9f:d9:b8:c8:
d7:8a:dc:02:72:6c:82:2b:41:b1:99:c8:2a:74:89:58:e0:53:
91:11:82:1f:44:0b:e1:68:7d:b8:9b:4e:42:2b:8f:e5:cc:22:
6e:c6:f7:de:ad:e2:50:cc:b9:ec:d2:d8:ae:05:1e:8f:2e:ed:
b8:18:e1:55:0e:0a:b5:18:e8:77:d4:fd:77:7c:82:fe:5a:29:
ca:a6:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:43:58 2024 by rpki-client on console-ams.rpki-client.org