Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
File: 80fO2aDtf5RLn078OFd7OObRxnM.cer (raw, json)
Hash identifier: G4qyTJrzBMXJajkN/USJ3uQuoJh0bLTNcq0cq6bNKZk=
Subject key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC14712C707980ACE7AA9449CFDC83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.159.244.0/24
IP: 2a13:780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:14:71:2c:70:79:80:ac:e7:aa:94:49:cf:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:51:87:08:45:93:f4:cc:b5:cb:84:6d:16:
4d:c0:7f:5e:cf:02:06:62:32:20:43:1e:af:0f:89:
6a:2c:a9:a7:82:a5:57:2e:33:a6:f0:96:b6:f1:d7:
e2:23:fc:9a:05:f1:64:d0:f2:93:27:b7:79:81:09:
fb:bd:76:8a:d7:b7:86:52:d9:97:a9:1c:45:3c:65:
78:67:ba:56:6f:5c:e9:34:a5:07:1f:5e:1f:88:77:
f1:15:48:de:75:48:db:d0:c5:e7:57:b1:c9:e8:97:
61:c9:75:82:a3:88:f6:dd:84:5a:f4:29:24:67:fb:
27:e9:de:4c:de:ac:56:cf:40:77:ae:03:24:27:a4:
77:39:1e:73:4d:66:b7:71:0a:ba:01:ce:0b:b8:84:
23:36:8b:6d:29:ba:a3:92:7c:5f:44:46:11:65:86:
fb:56:be:c8:53:89:2e:82:ec:de:ee:7c:d6:27:34:
06:9e:79:5f:c0:d9:d4:0a:f8:df:99:b5:8f:f0:1d:
e9:59:99:ba:91:ac:59:58:9a:c6:19:5a:bf:02:51:
25:3e:0f:28:47:ed:25:46:f0:12:e3:b2:e9:3b:a2:
df:99:4a:d0:33:17:3e:9c:44:8f:56:97:7b:7a:0a:
8b:c8:56:bc:dd:86:40:50:c5:37:22:93:2d:bd:fa:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.244.0/24
IPv6:
2a13:780::/29
Signature Algorithm: sha256WithRSAEncryption
35:8a:48:99:e7:8f:56:2f:0a:ac:87:0e:a4:3f:51:ef:1f:8e:
b0:82:b6:ce:f6:e9:d2:2a:44:62:83:6e:62:01:f8:6b:5b:08:
c3:43:47:38:4c:4e:01:99:18:c5:66:0f:d7:02:5a:c0:de:95:
2c:b0:37:a9:ad:17:9e:53:c8:ec:ca:71:6b:6e:80:c1:34:d3:
b3:39:20:69:6c:74:cf:62:57:21:b0:bf:71:b1:c6:85:27:08:
55:41:5f:e8:99:00:3d:41:72:21:d9:78:50:7c:2b:9b:ae:f2:
c2:52:d0:0e:51:19:3b:f3:1e:57:64:70:44:9e:b8:d0:99:81:
4c:74:ca:0b:03:02:84:12:de:2b:58:61:ee:ee:10:34:a0:82:
48:f3:9d:12:88:3c:48:95:c8:bc:29:b2:c1:7f:a4:66:42:66:
94:f8:a2:95:e7:23:7d:17:bf:aa:a6:64:8a:18:83:ff:b1:fc:
76:33:fb:8a:3c:ca:16:ec:ba:d0:1e:a7:bd:17:83:53:2c:ab:
7f:ff:96:df:88:9f:48:e7:dd:80:43:6f:58:70:29:99:a9:f0:
5f:2b:4f:c4:f5:45:73:93:df:e5:12:8b:36:a0:73:ae:70:e4:
3e:a5:0b:07:6a:2a:d9:a9:62:8c:f3:67:e0:ec:eb:7a:0a:18:
c3:91:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:48:10 2024 by rpki-client on console-fra.rpki-client.org