Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.cer (raw, json)
Hash identifier: JS3XPT6PWdPy/aJBMA9xa5GJJsRRrWpzlkZrX6tLhfU=
Subject key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC278A0585483DB204CB8891847668
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.201.220.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:27:8a:05:85:48:3d:b2:04:cb:88:91:84:76:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:67:82:5d:46:ab:48:d8:8c:6a:fe:cb:ad:
77:dc:98:40:aa:f1:81:fb:86:b9:f9:ab:e6:38:ef:
d1:7c:bd:78:bc:bd:be:eb:49:70:e4:66:8d:25:91:
9e:7b:6e:72:93:be:de:0b:0d:05:ae:e9:e6:b2:c2:
10:2a:3e:a3:02:fc:91:43:bc:fc:27:b8:66:3a:a5:
9f:74:4e:27:53:fb:2e:ca:3a:b7:7f:d6:c1:fa:0a:
8a:71:61:73:2f:6b:88:f9:92:c3:49:20:aa:03:ef:
aa:3d:ba:f1:4a:87:c2:da:a6:71:67:ee:01:03:15:
e6:5d:6b:43:82:01:d2:e1:3e:a9:d2:21:9b:95:cb:
25:d9:c2:e5:76:83:48:0c:c3:9d:b8:30:88:92:71:
b9:80:cf:a0:b3:3d:5d:e0:95:c7:c4:84:c2:ff:76:
8c:d7:97:c5:0d:38:84:b5:95:25:1b:eb:64:8a:ec:
be:92:b2:1b:95:52:69:54:f3:bb:0c:59:8d:96:2f:
be:20:fa:77:d2:72:dd:30:db:75:8c:4f:5b:db:71:
ac:44:fa:99:a6:cd:99:2b:35:5c:fb:1d:6f:8c:16:
d0:fb:a2:a7:eb:2d:ce:92:8a:0f:11:68:e2:03:1b:
20:96:9d:44:19:44:41:dd:64:49:22:16:f9:8f:62:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:0b:23:78:09:5c:16:3b:22:a5:3d:e6:2b:80:59:f6:6e:42:
ea:e7:fc:5f:20:eb:fb:7b:af:11:5d:93:64:ef:45:a9:4e:c7:
a8:e4:73:55:59:cb:f6:b5:c7:e8:23:e0:78:6a:0d:29:39:a4:
02:c4:27:d4:78:8c:89:e9:82:79:97:8c:04:66:b7:1a:7a:a2:
31:00:ec:09:d4:f1:97:a9:9b:40:87:aa:fc:ee:5e:1d:aa:60:
1b:22:2d:70:0b:4a:5b:11:5f:a0:ab:60:2d:d1:71:4d:67:b2:
8b:70:d4:8d:27:e1:e9:09:eb:32:b0:f6:c0:4c:7d:9a:ee:59:
23:4b:74:76:a3:5c:a0:5b:9b:c0:ea:77:5c:8c:00:b1:9b:22:
6e:d2:1d:c8:05:cb:53:0d:9c:5b:08:f2:be:d2:ed:c1:05:e6:
32:e7:45:5e:a0:81:60:0b:44:29:7d:9c:d3:57:40:c6:af:b2:
4e:39:90:86:81:9b:b8:53:e1:ba:58:d7:ae:29:29:3b:f3:94:
3b:71:9a:83:df:5d:d4:09:8e:7c:17:83:7d:c2:1c:cf:c5:c8:
62:53:10:52:b2:af:1a:3d:02:b8:a6:e8:a1:24:86:23:3f:0a:
c1:87:70:cb:50:16:0c:4f:86:52:c7:e8:09:e1:4c:0b:3b:35:
3d:4f:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:42:04 2024 by rpki-client on console-ams.rpki-client.org