Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
File: C2LPjNkLafk26CtXgBzXedcuPz4.cer (raw, json)
Hash identifier: F5G4Sei3r0EijfcJNFXyt3EYrz71KBOFSriJ17ehnLY=
Subject key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB221C9C166F03C7F7624A8CE289BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.53.216.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:22:1c:9c:16:6f:03:c7:f7:62:4a:8c:e2:89:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:27:48:72:a5:6f:e1:b1:51:c4:e0:03:05:
21:31:13:2e:ae:ef:51:74:47:0c:95:fc:94:fb:2e:
48:b0:60:05:e8:b7:84:43:50:8b:17:e7:b5:7f:e1:
88:0b:7c:ad:1a:96:e8:2d:ad:0e:0c:86:fe:bd:3a:
aa:c0:25:50:11:1b:f5:6b:0f:c3:b8:c1:d1:d4:12:
08:97:b7:a1:15:7b:90:b9:e0:a2:25:75:ba:64:03:
40:94:ba:38:01:cb:c9:2f:33:f7:91:0b:e9:40:94:
d1:18:08:71:ee:71:a7:42:79:fd:55:eb:08:8a:38:
4f:b4:18:c1:28:88:55:03:88:2e:3c:d3:9c:45:78:
50:f6:5b:da:19:9d:bb:65:b5:69:64:f2:de:e8:95:
56:1e:42:94:04:a0:99:b2:c4:1b:0f:8d:5d:39:38:
24:6f:8d:ce:ff:d0:4a:7b:bd:31:a4:3a:3e:b8:cd:
98:75:51:a5:c7:ab:14:54:17:20:38:43:47:77:2e:
f5:f8:12:45:ec:7b:d9:a4:74:a7:16:1f:3f:dd:e8:
7c:5c:e9:c3:ec:7a:9a:a5:b8:63:f3:c1:a8:8e:8f:
83:58:a8:da:2c:33:14:93:a4:47:92:39:b0:67:d3:
d6:f5:6f:e1:0d:12:06:a0:d5:63:8b:e1:73:1f:cf:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.216.0/21
Signature Algorithm: sha256WithRSAEncryption
91:92:8b:23:66:f0:f8:de:1c:fb:7c:af:bc:b2:4b:5c:51:b1:
f0:61:4f:2b:ff:19:f6:f7:8a:17:cc:8d:3b:f2:fc:9e:a7:54:
d1:99:ea:69:3e:79:6c:22:a5:28:ef:ec:19:29:b7:36:96:87:
08:e1:83:76:18:41:9b:68:94:cc:d7:da:30:c8:48:ce:83:b7:
f0:84:59:82:97:a5:c5:ed:50:a3:9e:3f:d7:5d:d9:41:a0:61:
7b:0d:b1:2f:4e:b7:17:93:95:30:89:c6:b1:3e:d0:ae:8c:ce:
3e:b6:83:aa:af:89:1e:56:23:a8:0c:ba:b6:ea:65:13:2f:7b:
92:c8:d0:82:a2:df:74:cb:13:22:90:24:6d:25:fd:7a:cd:c7:
c9:f4:9f:cd:34:99:9e:95:e5:fa:20:4d:67:1c:00:24:b9:5c:
33:70:f3:a2:cc:23:2f:fd:69:bc:e2:7c:c1:8d:e5:0c:54:6e:
b3:d6:1d:44:00:be:78:f9:1d:bd:98:3f:e0:d3:54:fb:dc:0a:
35:39:0f:fd:5f:07:00:a5:f1:75:38:4e:57:1d:7a:b8:01:d3:
4e:f9:15:7b:7e:89:97:df:6d:b4:47:ed:60:ce:c2:35:32:d6:
f0:91:a1:4c:a4:c8:a4:2b:1c:57:32:67:d3:67:41:69:c0:d1:
b0:c6:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 17:02:54 2024 by rpki-client on console-fra.rpki-client.org