Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
File: CMuJoREU774OHiVQ7Nozb9eS7F8.cer (raw, json)
Hash identifier: 3R+zgZ7GP+aFbVQS8ene1xUiAv0kW/ZEAs/4O5C772g=
Subject key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC69E2E0789BD3243F1C6B2425AF2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.127.228.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:69:e2:e0:78:9b:d3:24:3f:1c:6b:24:25:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:95:b8:09:7f:85:f8:b0:de:77:4f:21:d7:
9d:92:56:99:00:16:e5:c0:38:a8:07:28:cf:09:76:
ee:1f:e2:c2:f1:6e:da:6e:e9:7f:9b:36:f4:9f:11:
ea:dc:94:7a:d8:62:ec:fd:fa:88:1c:10:9d:47:ec:
db:79:74:7e:48:8d:e4:e8:a0:18:4e:0f:ec:dc:9a:
94:db:a1:27:9d:59:e4:09:35:05:e8:c8:75:cd:8a:
fb:89:43:7c:f4:b1:8d:59:0b:a3:46:b9:ca:08:5e:
2f:0a:fa:02:44:58:dd:40:41:43:ce:d9:e4:a6:74:
08:44:91:ec:20:02:43:a3:7d:5c:99:af:35:83:47:
a8:fc:01:9d:3c:2b:4f:36:de:d3:51:ed:47:48:28:
86:d9:39:8a:1b:ee:cb:30:dc:0a:85:60:b9:a6:b7:
59:7b:31:b2:28:0c:63:96:fb:38:4a:54:69:c8:e6:
32:f6:c9:07:09:d5:12:0f:1d:ac:22:ef:fc:e8:7c:
03:bb:83:11:35:1a:9f:f7:c3:a8:7b:aa:e9:04:0a:
b4:24:96:8b:5b:52:c1:5d:1d:c9:bc:e7:3e:3e:e6:
9f:80:08:05:77:6b:c9:6f:a2:52:a8:a8:d9:4d:e9:
22:9a:60:51:5e:d6:46:c1:0b:b4:67:98:e6:c1:16:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.228.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7d:95:74:be:e9:2c:8f:ae:f8:f0:c1:af:76:67:b0:7c:6f:
0f:4f:6a:b1:b8:54:53:4d:97:5a:e6:cb:21:e4:61:ae:af:30:
10:5b:67:43:f8:61:36:8c:3d:0b:31:90:73:01:c4:f7:aa:5f:
48:89:b9:8a:b8:2a:54:67:04:54:ab:cd:9c:01:2c:a7:85:dc:
81:c1:91:3a:1b:08:fa:3a:3d:13:27:d0:90:b7:ce:69:b8:32:
33:05:6c:2a:b1:3b:c9:e5:92:e3:dc:91:66:4e:42:3d:3b:df:
41:34:ff:91:1d:31:15:40:c4:e6:15:3a:b6:dc:e2:a2:6b:b5:
d8:04:41:f5:13:1c:49:31:13:9f:df:6f:80:a4:e1:34:c4:9d:
12:30:bf:f3:68:25:11:f1:51:6d:5b:7b:ea:59:35:ab:95:35:
fa:65:db:06:9e:84:7d:b4:6c:cb:3c:9a:a6:f2:65:f6:3d:f6:
51:af:34:a9:64:41:f2:f4:ff:de:1d:2e:c6:13:a3:14:4e:4f:
5e:da:77:53:4f:09:81:cb:4c:43:54:96:80:0d:fe:f7:13:6c:
97:e4:48:68:83:2b:8d:ee:26:b0:f4:15:8d:21:b1:a2:74:70:
0a:d1:22:c5:7c:0e:15:e3:aa:a0:66:58:17:8c:8c:89:76:77:
d4:2a:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:09:15 2024 by rpki-client on console-ams.rpki-client.org