Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.cer (raw, json)
Hash identifier: koccBrAtMQ5VuVWk6QEekrlxl5n0E/YkS6sMRhPHvGc=
Subject key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192512715A2C1D7CDA8BA7FFB356B99B6D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Oct 2024 06:52:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.3.234.0/23
IP: 193.163.131.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:27:15:a2:c1:d7:cd:a8:ba:7f:fb:35:6b:99:b6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 06:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:a7:9f:8d:d0:a2:41:a4:8e:31:6d:cc:c0:
46:80:18:54:6c:ed:b3:69:bb:3d:1b:94:80:a6:ff:
59:2f:7c:d8:f5:30:ce:c0:bf:ac:da:1f:6c:15:19:
d3:78:0c:74:48:f4:f2:6a:bd:9b:7a:25:94:a2:a9:
75:4e:dc:e1:0a:b6:ed:f9:cb:be:fa:3f:47:c1:ff:
a6:8b:b9:dc:e1:db:c7:4d:6e:aa:37:17:99:ad:d1:
32:4b:3e:0f:b3:a0:4b:89:cc:8e:4d:f7:61:b2:04:
71:10:07:69:67:e4:1e:4f:4c:87:29:c4:74:0e:0d:
9c:41:8d:c4:00:28:db:1d:60:2e:4c:d5:a8:57:87:
27:60:af:4f:7d:9f:69:fa:d3:3a:1b:15:5f:d6:d5:
7e:0f:91:d9:67:74:03:86:e6:e5:64:a2:cd:39:27:
0b:cf:99:08:3b:28:2b:9c:7b:f2:73:fd:8d:fc:83:
82:1b:93:3d:37:47:21:64:bf:db:46:e5:6e:e4:df:
46:08:3a:a9:30:f0:51:54:04:72:bf:6b:fd:f7:bf:
ff:ff:16:d7:0d:1d:a9:cb:2e:19:c9:ee:b3:ea:9b:
1c:a5:25:14:ca:7d:7e:74:a1:f1:ff:6c:13:dd:c0:
25:07:02:51:50:e8:0d:64:b6:92:d0:02:ea:fe:c1:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.234.0/23
193.163.131.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a8:08:10:cf:02:1c:74:0f:f0:31:c5:74:a1:79:06:27:25:
a2:f8:dd:2a:9d:6d:e3:06:5c:e4:20:ba:ac:ae:8b:1e:58:66:
9f:3a:99:24:60:8d:a4:84:51:dd:ba:02:c8:a3:1a:10:b5:7d:
e7:9a:7f:a4:4a:f9:2c:63:3d:88:5a:eb:4e:15:2d:6d:e4:4e:
3b:bd:c4:9e:3b:2d:0f:39:6e:5f:12:ac:60:b9:dc:b8:ff:6f:
1f:3a:11:a7:c5:0d:aa:94:38:7d:db:3d:5a:e1:f1:8f:9d:d2:
d8:07:54:0e:c9:9a:84:15:30:cc:a0:8f:1d:6f:0a:9c:db:d1:
7f:9f:af:51:b8:9f:36:93:22:2f:71:6f:4d:f7:dc:7b:3b:1a:
d0:3f:dd:35:b3:27:4f:11:e2:53:1f:49:f3:71:62:d8:67:7d:
22:78:e2:6f:57:af:eb:10:bd:b2:1c:cd:0b:71:d2:d6:5c:1c:
83:6c:3c:51:a2:73:74:b9:bd:8d:67:17:23:aa:83:a3:df:ee:
d2:d8:9a:67:9e:2a:6b:e4:0d:d2:3f:3a:95:ac:88:b8:1e:4b:
4b:54:54:db:22:a0:a2:6a:28:5e:53:7b:e4:ad:f1:ae:e0:56:
5c:6f:aa:aa:70:4d:ee:24:f4:07:11:50:41:fa:23:bc:af:cb:
3e:7f:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:37 2024 by rpki-client on console-ams.rpki-client.org