Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
File: AkhBfH_pzOxbnarMCPznmdZzCIw.cer (raw, json)
Hash identifier: JXLHt8tCiBxe0PC5caYsTzQ+Y+RHQ0Kq8Vr+OxqSt1o=
Subject key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B1ECB581B99B0A295ED5F79BCF07A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.86.172.0/22
IP: 2a05:b840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:1e:cb:58:1b:99:b0:a2:95:ed:5f:79:bc:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:3a:25:4a:19:8d:01:f2:1a:65:72:fa:33:
8e:01:43:f1:21:a1:e8:c5:e5:4e:19:32:ed:0b:1e:
e7:3f:7a:69:4e:da:c2:4c:25:2f:6a:bb:1b:5e:ff:
47:59:57:9f:56:90:84:eb:84:f8:67:c3:0f:a3:43:
13:91:30:60:bf:cf:34:df:f8:ea:9e:96:87:bc:6b:
85:b0:a1:02:87:74:15:84:31:34:e6:2f:e6:62:1d:
e6:53:e7:ab:f3:c8:a8:e4:f6:98:c1:7b:d2:e6:a0:
a8:7f:3e:ce:4a:20:26:2b:72:09:63:ca:a7:b6:68:
d2:c9:f7:fb:98:7f:97:dc:5d:3d:9e:8e:05:5a:2b:
6c:9b:8f:54:7a:6d:b7:74:49:cf:94:0c:9b:0c:de:
9b:01:5c:bf:7e:5e:c7:3c:67:a2:2f:19:c2:f2:06:
09:5b:9f:e3:a0:e0:12:30:59:c1:cc:20:d4:9a:f1:
89:09:dd:d7:e8:bc:14:8a:80:49:b8:25:25:57:0c:
0d:46:a6:de:ce:c1:0a:8d:99:e6:05:dc:69:b6:06:
7f:2c:d7:a5:c9:f8:0d:89:c5:cf:9d:b3:78:79:7e:
4d:6f:d0:d6:b9:7a:d3:5f:4f:22:f6:a2:29:1d:eb:
fc:a7:07:62:d3:ce:64:09:23:9b:a3:49:e1:00:df:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.172.0/22
IPv6:
2a05:b840::/29
Signature Algorithm: sha256WithRSAEncryption
9a:72:56:95:6f:d9:b6:fa:db:37:be:f1:59:69:9d:fa:c3:ac:
f4:36:a6:c9:60:fc:d7:47:64:36:91:fb:d1:53:db:e6:25:fd:
ca:8c:07:28:d2:4a:ca:70:a9:cf:bb:f0:71:b1:61:a0:57:30:
ed:94:08:66:64:9d:47:2e:c2:ea:b1:d6:00:62:e9:8f:8a:c0:
85:63:38:50:6e:26:72:d9:4b:3b:7c:eb:93:3c:6a:b6:b6:4c:
72:cc:98:12:f7:52:37:c9:21:10:56:f2:70:10:ae:74:6d:48:
16:78:54:cc:c6:f5:5b:58:4b:01:a2:c3:1c:00:00:ea:a3:e3:
7e:78:ee:2f:2b:4b:73:b3:e7:a0:24:b2:5e:73:58:64:ca:57:
f8:eb:7a:87:53:4c:34:4d:44:bd:e3:2f:8f:9b:41:94:30:11:
97:c2:03:ff:88:2f:a1:be:ef:9a:4a:32:f6:5b:a1:ed:8f:eb:
f5:ff:bf:e8:2d:fd:90:9f:b9:24:2c:10:02:ac:44:ab:d7:82:
4b:42:4c:99:62:56:31:f6:43:cf:11:4c:d1:92:b0:df:65:88:
19:3b:46:27:f9:fc:d9:4e:12:22:de:06:0c:34:8d:62:ca:99:
cf:b9:7f:20:97:b7:49:12:67:85:22:95:55:f1:69:23:b4:3c:
c6:b4:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:01:46 2024 by rpki-client on console-fra.rpki-client.org