Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer (raw, json)
Hash identifier: F3KzMxlWAEhD3o0JM3FbHX7ABuOP016zpVn3a1WAv3k=
Subject key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D5EA79006C5AA9E891F76D900AB17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.235.104.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5e:a7:90:06:c5:aa:9e:89:1f:76:d9:00:ab:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:20:f7:0d:48:02:53:82:be:32:b9:e7:3d:
a3:69:25:c9:76:5c:d5:4b:81:d7:e5:47:17:fe:96:
74:fb:b6:70:a5:7f:4e:10:38:40:af:e3:3e:94:07:
95:64:02:e3:f8:38:d2:c5:1f:65:94:f3:7d:ec:3e:
bf:a9:ca:20:42:a2:0e:ce:5e:05:08:cf:48:e0:04:
f8:e3:9c:28:40:49:36:b2:c0:ab:1f:5d:2a:6a:1c:
cd:fb:d0:b0:f2:01:f4:ab:30:fe:04:ed:a2:79:bf:
2f:85:da:e4:a1:2d:bb:8c:f6:3d:45:51:18:ba:16:
15:c1:de:35:13:3e:9f:e1:9b:64:0d:16:8f:3e:5d:
30:1e:84:b4:f5:c7:f8:2a:91:26:f4:11:3f:e3:f2:
26:ae:b5:4d:0f:24:b2:97:ab:06:ec:35:2c:9f:e4:
4d:6b:e0:36:27:c1:44:6c:32:39:04:ea:86:aa:ee:
77:db:98:49:04:46:75:1f:ef:ec:f2:39:ed:3f:70:
d7:56:07:d1:bd:ee:ea:94:0c:6e:26:d9:23:8c:2e:
20:83:10:91:79:cb:92:8f:67:0e:44:50:6a:67:9b:
7c:31:de:d8:63:2c:c1:d2:84:05:93:7e:d3:ee:6a:
f4:07:9f:97:73:fa:d3:ef:49:3a:3c:ad:32:d2:1f:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.104.0/22
Signature Algorithm: sha256WithRSAEncryption
31:17:dc:1d:b9:4e:95:71:22:7c:15:d7:c4:60:8b:2d:38:cd:
e2:33:ff:66:12:77:d1:b5:42:3d:a6:f3:12:fb:0d:f7:84:b2:
22:04:61:26:2c:f4:ec:71:c8:fc:e6:36:4e:a0:21:2f:c4:cb:
c9:c9:6e:01:78:4c:32:ea:ef:98:99:b7:86:8f:60:30:b3:3f:
17:5e:75:10:6a:d8:1c:86:3e:f9:ab:c9:e8:2c:47:67:6d:f1:
a6:d5:e1:13:17:1a:09:bc:ed:e5:2e:73:20:2e:e4:c5:2b:e2:
36:c7:19:3b:1f:dd:2f:21:53:e2:b1:08:22:9f:7f:4a:06:85:
9c:b4:d7:69:19:fc:3d:d0:c0:69:fe:de:b1:e1:54:31:3e:94:
76:9f:64:b4:47:54:32:d6:a2:f3:fa:a1:8a:1b:e1:9c:c2:c5:
67:83:35:0d:06:b8:07:28:fb:37:1a:46:6f:18:25:f1:7e:5d:
09:76:b4:df:bf:f9:f8:07:23:48:02:14:4f:11:c3:00:a9:48:
62:b3:fa:50:a4:11:4f:e5:a6:bf:70:16:b4:91:e5:e3:5f:73:
7f:0c:b3:77:02:c2:05:c5:82:3e:65:28:bc:6d:76:58:ad:dd:
16:ea:06:91:41:4e:56:5e:04:53:09:67:70:5f:23:21:ab:d6:
b8:e3:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:50 2024 by rpki-client on console-ams.rpki-client.org