Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
File: AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer (raw, json)
Hash identifier: RmmseT1E9BTTZCqGTYmgkisigZpRpaYr4NiRPNQBRP0=
Subject key identifier: 00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B69746A5C08D2C77D99BAF7F5351E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.82.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:97:46:a5:c0:8d:2c:77:d9:9b:af:7f:53:51:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0046801e45ca1eed3f78d99277d0193f576665c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:3b:43:07:35:b5:be:57:9d:80:7a:26:d5:
26:2c:17:e1:ba:0c:7d:46:14:de:8d:5e:c4:83:8f:
fc:4c:4c:42:a6:be:62:1e:8a:dc:0d:17:b8:66:b9:
8d:2e:fd:b0:fd:be:e5:d9:3c:46:4a:77:d7:dc:0a:
44:a2:47:59:9c:36:50:e6:39:65:a3:e9:f9:fb:ad:
fd:5a:41:a5:64:75:c2:4e:cf:cf:5b:85:79:b1:9f:
58:d5:4e:1a:f7:8d:0b:4d:93:f5:4d:5c:85:2d:9a:
80:56:5f:ad:c5:8b:3c:7e:bc:e0:07:45:c2:fc:2f:
de:a7:e8:a9:79:d0:09:4b:a5:05:71:46:94:c4:99:
95:15:8c:a1:97:31:9e:98:3e:d2:30:8e:f1:17:3a:
6a:71:f2:c1:d1:45:80:38:d8:a0:e0:cb:31:13:a6:
e9:06:7d:46:ed:e2:40:33:5e:24:6c:b5:88:cb:cc:
1f:25:09:fa:30:52:f1:e1:df:4a:d9:23:85:cc:f1:
c9:c4:85:f1:82:0c:5d:ee:37:01:b7:a6:4c:d4:72:
80:9e:75:62:07:c2:8e:da:45:28:0e:17:2e:38:20:
ef:97:ab:ea:6f:ea:05:7a:19:9a:24:fd:14:09:9d:
cc:5f:fb:3d:1c:81:47:62:9c:ac:16:f0:be:da:ca:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.156.0/22
Signature Algorithm: sha256WithRSAEncryption
25:0c:b7:9e:d1:2f:ff:57:a0:6b:85:fb:98:25:7b:dd:06:5b:
59:5f:84:ab:44:bf:3d:2e:f7:ef:23:24:d5:f1:97:e9:0f:e3:
a3:4c:dc:72:e0:a4:10:36:91:4e:ed:c1:a4:a4:49:f4:b7:3f:
16:2e:ca:a4:9e:d7:d6:c2:4e:c4:72:d6:f0:55:d2:3a:0a:2a:
b3:6e:19:ab:34:8b:28:ef:93:54:4e:c7:5e:32:9d:50:8d:7c:
74:8a:2c:ca:7b:46:65:65:28:62:47:5d:69:df:0e:af:a8:05:
8b:25:4c:67:56:2d:b5:78:5e:5d:97:cd:3f:ce:1d:83:14:d6:
05:07:a2:e3:75:26:4a:d3:ff:2b:48:3f:a8:43:20:95:f2:75:
29:1e:da:e0:3f:51:aa:66:67:88:76:c3:a7:fc:8a:58:a4:f9:
a0:9a:73:7d:51:7f:39:80:9b:b6:7c:4d:cf:93:75:ff:ad:7d:
9a:85:37:de:82:43:ba:b2:d1:8c:47:3d:fc:39:68:b2:e6:86:
dc:3a:8f:c4:e9:5e:bd:6f:1a:ba:d2:b0:77:0e:27:31:1d:58:
e5:ae:db:c5:cf:1a:be:11:17:c2:cd:de:b2:0e:03:d5:02:86:
bf:2d:7b:f2:93:df:e6:f4:25:e2:5c:c8:4f:64:4f:cb:44:76:
11:7e:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:58:00 2024 by rpki-client on console-fra.rpki-client.org