Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
File: AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer (raw, json)
Hash identifier: 24CFKOt1l8EH8NbQFRZxYUUEEWran8NXa0kKYMfaQaI=
Subject key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B86B0ABFFD2939C808E31AED20FBF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.50.57.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:6b:0a:bf:fd:29:39:c8:08:e3:1a:ed:20:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:aa:3d:53:7a:4a:6b:f7:e6:88:4a:ae:18:
2e:72:28:40:2a:7e:78:64:81:59:28:7a:7c:b0:6b:
15:f2:7c:3e:ee:64:a5:35:87:be:c4:f3:62:13:32:
0b:73:44:79:62:9c:46:9b:e7:db:50:94:c2:8d:e3:
ef:21:45:4f:a9:25:a5:cf:85:19:bd:3c:9b:49:e2:
3f:d3:1f:bf:17:35:ad:04:d1:52:e8:f3:4b:15:4b:
75:0a:82:91:d5:cc:ec:13:f0:12:ef:01:9d:63:dd:
6d:78:d2:a4:7a:cb:df:ed:25:7c:b1:93:e3:46:8c:
f5:c0:ed:f2:ab:f4:a1:ee:29:32:16:6f:6f:72:64:
7b:49:ec:7b:9d:48:bd:e9:a9:7d:d9:29:2f:89:0b:
cc:b9:60:77:14:cf:1f:c2:ac:33:61:e7:52:1c:dd:
01:29:e9:f8:e1:91:49:41:11:9f:de:2c:44:86:ee:
fc:bb:77:03:e9:7c:44:e6:8b:9e:c5:8c:4b:cb:30:
5a:8b:51:70:fc:a8:1d:28:5b:35:b9:5f:38:1a:9f:
02:d0:c9:31:cd:c3:78:14:93:b9:6d:eb:1b:48:d4:
d2:bb:6f:9f:f5:dc:aa:15:e3:09:d0:73:85:bc:77:
4c:6d:19:a7:6c:bc:6d:bd:d0:97:cc:21:8b:23:e5:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3c:92:41:e5:e8:8e:41:f6:fa:12:64:15:1f:94:00:69:f3:
81:f7:2a:60:f4:39:38:7f:37:8d:a8:19:7c:a4:cb:dd:bf:df:
37:8b:ba:41:bc:be:b5:7d:e9:12:88:7a:1b:4f:e2:ca:3c:5a:
a7:ec:e0:55:c2:b3:7d:d9:98:c5:bc:70:78:c8:17:89:1b:85:
c9:f3:1d:0c:4f:e8:72:f9:e5:e7:75:3d:6d:21:d4:9c:fa:a1:
8a:ed:41:ec:1e:8e:bc:56:cc:5c:09:3d:d4:ac:f1:63:7a:e4:
f4:e7:0b:1f:e7:18:c9:6c:08:27:c8:05:25:39:07:97:6d:6b:
f6:a6:8c:68:db:8f:0b:a2:57:cf:ca:03:86:a4:34:9c:a0:c7:
ee:b3:6c:60:e5:30:fc:eb:f1:f6:8b:e7:15:e3:15:5a:c7:b7:
8f:b8:3e:b1:03:d4:7d:c8:9e:17:fc:fc:a2:f1:45:ed:16:9c:
92:ff:c9:b8:c8:bd:44:e3:c5:70:1c:c8:23:1e:82:08:c4:67:
1f:47:d1:49:1c:e3:31:be:f3:ac:a4:af:93:1e:c8:16:3c:27:
c9:be:1c:dc:8d:4e:67:e1:bc:dd:4b:9c:dc:5e:a7:c8:a9:3d:
33:04:92:b2:d4:96:48:f2:a4:19:93:2f:32:53:92:e8:a9:20:
d9:18:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:17:58 2024 by rpki-client on console-fra.rpki-client.org