Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
File: B-4HmfCK-P5SD5SCzdBejqZeYag.cer (raw, json)
Hash identifier: mJ1dmpHjMwAEcr/pHdnOEIGGdwhnyBzmYug5FSjWOgk=
Subject key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA991915CDDB2C0E77D0DC2F8E5C6BFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.138.10.0 -- 193.138.27.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:19:15:cd:db:2c:0e:77:d0:dc:2f:8e:5c:6b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:86:b3:ac:fd:9e:9c:fe:19:fb:81:d0:4b:
15:81:63:c1:5e:15:91:46:c6:86:89:e3:d4:39:70:
9a:83:fd:5c:de:92:09:86:38:2e:5d:d6:d4:5d:d5:
58:a0:2c:58:88:1f:50:de:66:55:d1:2b:82:ab:a1:
b8:26:d5:8a:10:9f:86:32:fc:4f:46:c9:cb:8a:7c:
d0:58:6b:68:c4:d2:5f:f8:a0:56:cc:03:c6:3e:b0:
db:63:2a:24:fe:62:a3:70:d5:33:22:f6:88:12:55:
03:92:35:c6:e7:dd:5f:0b:0a:f1:d9:b7:89:60:2d:
41:78:08:83:1c:28:47:b0:2f:51:29:2a:2b:0d:d4:
3f:52:3a:4f:71:33:b0:f7:ce:a9:4f:ed:7d:1e:ff:
5f:bb:28:aa:7b:e6:01:8a:a4:f0:78:22:cf:16:33:
0d:09:ca:c8:7b:70:9b:4b:90:ac:c5:c4:93:01:34:
f6:4f:84:26:46:de:75:46:35:c9:ab:db:ce:73:0a:
d6:37:41:2a:43:6f:65:05:52:13:09:59:1a:fd:01:
46:dd:bc:59:7f:6b:4e:56:7a:b6:a6:45:8f:c3:0c:
e2:0f:c5:b4:ce:1f:ea:f5:ee:0b:16:5b:f5:d9:11:
31:16:57:d6:d1:55:eb:88:2f:e2:96:d5:c5:40:80:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.10.0-193.138.27.255
Signature Algorithm: sha256WithRSAEncryption
96:f6:da:78:6c:bc:e3:c1:04:84:bc:fe:b9:01:ec:4b:c3:45:
6b:e2:c1:87:13:64:fe:24:63:3c:57:3d:84:f2:a9:a3:3f:c5:
36:c5:11:75:0a:75:76:d7:b2:c7:41:6a:f9:ab:e1:84:ad:b6:
55:7f:19:70:15:b2:af:61:cf:b4:9e:b8:64:64:49:e0:0b:bc:
f8:ed:d6:4b:7d:a0:0c:e0:2e:4c:cc:dc:ab:76:ef:f6:cf:c4:
db:b5:cc:64:6e:9c:e1:45:b2:bd:12:c4:57:39:5c:cf:a2:0e:
48:e0:29:38:50:11:d6:24:ef:d6:03:73:a5:83:6e:80:f9:eb:
99:9e:93:36:6f:fb:53:99:30:67:df:82:dc:a7:a2:3c:9b:9c:
fb:89:54:9a:b6:0a:e8:e2:d6:63:12:85:a3:49:f8:5f:6c:0c:
15:65:2e:52:f9:22:c3:69:ba:df:f3:0b:32:56:d3:76:20:ab:
72:b9:25:58:db:c2:9d:20:5c:10:54:a0:1b:d6:68:dc:b3:2d:
9f:d3:89:09:c3:4f:c8:9b:dc:13:c3:40:47:f1:0d:96:c3:f4:
4c:3c:ef:78:80:c2:18:bb:07:a6:d8:0c:79:ed:87:1c:e9:35:
27:bc:e6:f4:be:c9:62:3f:bd:76:6b:11:3f:09:ee:15:0f:98:
33:a7:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:01:50 2024 by rpki-client on console-fra.rpki-client.org