Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
File: AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer (raw, json)
Hash identifier: cqwWnxiIzRdxMULlDccKMY1uD/3/VJu7wQAnB5C5L74=
Subject key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FA5512BFDC8BA39A05382D4820172
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 139.30.0.0/16
IP: 192.76.158.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a5:51:2b:fd:c8:ba:39:a0:53:82:d4:82:01:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:42:88:56:11:ff:51:c8:a7:21:f1:6d:7c:
e0:ea:dd:1b:d2:b8:56:33:f6:ab:83:80:84:6f:f0:
28:40:5a:f9:90:b3:22:ec:34:bf:e3:2a:b9:9e:6c:
24:d6:fe:e3:e0:a4:f8:d9:f1:b0:c6:33:84:a2:0b:
9c:36:96:78:25:da:d2:d4:d1:e5:de:c8:a4:c6:6d:
e8:b8:7b:d2:d1:28:60:64:d9:b7:53:9d:cd:7d:03:
72:44:ff:c4:e9:86:f9:1a:e3:f8:c7:d1:19:2d:88:
47:3d:ef:62:a2:1c:dd:2c:47:0b:f4:d2:e5:ba:0c:
1b:ca:ce:82:07:41:45:84:25:e1:a9:4f:e7:1a:16:
a6:f9:a6:7f:28:c8:00:8f:87:d2:ca:8f:a1:32:12:
0c:8a:76:cc:5b:01:6b:4b:60:a8:8a:f7:cd:b8:25:
89:7b:1a:42:5f:96:53:3d:7e:81:c5:17:60:37:21:
a1:72:8f:83:b9:50:df:1e:7a:aa:03:e9:a8:d6:a3:
97:42:cb:e3:8b:b5:3c:4e:ac:20:bc:bb:38:07:e3:
a2:8f:9f:0d:bd:f7:e2:0c:90:76:21:4f:80:f9:8d:
13:a6:f3:cc:c7:82:0c:3e:ec:22:2a:b1:c0:9c:c5:
5f:8c:b8:ae:76:22:8f:00:e7:87:fc:7b:ce:05:54:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.30.0.0/16
192.76.158.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6e:df:9b:26:40:4c:bb:c8:5a:84:89:db:82:ab:e1:05:42:
b8:5a:9e:eb:66:42:94:d9:b5:a8:fb:4c:99:a8:ec:c2:f4:cf:
7f:34:af:4a:3c:ab:04:c2:1e:aa:6b:b7:b6:05:f7:a1:ee:dd:
88:e7:dd:04:cd:b2:32:bb:9e:f9:95:16:1f:d6:be:bc:9b:97:
ab:f1:14:55:3a:7c:3a:d2:7d:9d:60:28:23:d5:30:ff:eb:75:
4c:08:59:8c:15:ad:77:69:c8:0f:63:e5:7f:68:1a:b6:d7:37:
4d:98:27:65:46:96:84:04:d4:e0:d6:62:8c:2f:69:a3:7f:6f:
3f:c2:03:6a:69:c5:6b:c4:6c:27:83:a8:32:8a:d8:a2:c3:80:
be:e8:db:1d:58:3f:27:a7:1d:34:d5:33:26:1a:c9:79:c3:89:
b4:79:39:4f:cb:4f:23:d2:56:62:b3:d6:49:33:ab:3f:0e:01:
f0:c7:7e:85:1b:0b:02:cf:54:92:73:9d:86:3a:a2:9d:ce:14:
0b:e8:4a:f9:4c:3f:d3:9f:a6:96:1e:31:04:7f:0b:b1:f3:c1:
fe:e3:5b:3c:7f:89:e4:9b:dd:1b:fe:ac:ab:c7:aa:fb:52:a4:
d4:cd:70:01:68:42:e5:41:f7:98:75:c4:f6:b4:2d:58:76:a3:
95:f7:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:18:05 2024 by rpki-client on console-fra.rpki-client.org