Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
File: B2X29feTbbg1Ggo5PPBppRjldEU.cer (raw, json)
Hash identifier: 2awfmbqiSNc5CGb+3alIAAI6umtmrjTT+aOFispG2FY=
Subject key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99FEB8CB8B08B7E1EA0921D3D029AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.33.180.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:fe:b8:cb:8b:08:b7:e1:ea:09:21:d3:d0:29:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:a3:eb:6d:6f:f0:8f:72:4c:c3:58:f4:9e:
93:0c:17:f0:1b:71:b3:e8:1c:aa:d7:50:5e:35:6c:
da:99:f6:ee:bc:48:f2:0e:b8:50:a2:3d:ab:42:f9:
85:63:9d:d0:2d:00:c5:27:15:6d:37:44:ce:3e:33:
33:db:2a:04:82:63:53:b6:aa:32:9a:bf:ff:e2:b9:
f0:80:6e:63:9d:f2:2a:4a:6f:23:0b:65:b0:e0:0f:
ef:44:f0:42:2e:92:a4:64:f9:14:8c:22:54:16:9e:
69:91:af:f7:2d:21:20:b0:9a:49:bb:e0:a1:bf:b6:
62:3d:1b:cc:41:20:b3:63:19:b8:3f:1e:45:89:74:
be:7e:73:5c:2d:6d:e8:47:6d:cd:7c:da:bd:80:d3:
11:4b:a2:70:43:fe:34:f7:be:94:7d:e7:72:4e:f0:
86:6b:82:f2:c7:c2:f4:9b:95:10:e5:24:62:42:38:
e7:41:be:38:2f:71:a9:90:83:66:28:30:37:3c:af:
70:e8:48:79:8d:08:41:1f:60:78:9a:82:eb:4c:a2:
a3:68:48:80:de:10:ab:5e:a0:27:73:7f:84:28:f6:
57:6d:6c:58:a1:cd:83:fb:45:ba:1c:96:40:f2:98:
4c:16:77:5d:b3:c9:ef:9d:a6:0b:5c:ef:0d:47:d9:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.180.0/23
Signature Algorithm: sha256WithRSAEncryption
81:da:bd:a8:6f:c1:68:0e:1f:e1:e8:f2:51:d6:07:b4:ee:cc:
ce:7c:d9:3f:94:44:05:7c:df:c5:db:ba:1f:9a:c1:e7:a9:a2:
c6:cd:c9:46:fc:fd:59:09:92:3b:c4:60:10:e0:1c:4c:33:4c:
ef:f2:37:a3:50:69:d8:bb:27:2f:28:be:0c:6e:54:eb:17:b3:
ef:23:9f:b2:54:af:a4:fa:19:b8:84:35:38:ad:be:c2:6e:26:
1a:bd:6f:fa:63:d0:b1:8f:cb:5c:06:0e:90:9e:28:78:ef:57:
fb:58:05:32:7a:8e:59:35:4c:15:55:b3:ee:b7:8f:f7:8f:77:
8b:8b:4c:45:e2:da:95:51:18:34:2d:e0:f2:f5:88:3a:03:24:
2a:61:7f:73:7a:ab:63:7b:8e:0f:da:07:9b:35:e1:55:ed:8f:
77:6d:84:e4:b0:0a:03:cb:ed:bb:d0:4d:62:6e:d8:a4:54:f6:
fc:06:77:75:ed:87:bf:ea:99:e6:1c:a2:07:e8:b3:b8:b9:db:
73:22:f4:9a:c6:a8:4a:d9:41:22:24:c8:cb:02:44:6e:79:85:
0e:5b:90:7e:d5:f4:22:8d:73:87:46:79:4d:13:f7:b7:b8:2b:
9b:06:4b:6d:e3:bf:4c:94:b6:2d:3d:db:af:3f:c9:96:83:e0:
84:ac:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:01:51 2024 by rpki-client on console-fra.rpki-client.org