Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.cer (raw, json)
Hash identifier: NLrUiM6RPZggEaM3dAgVgL64uakw6BWuRkjCJHAe4yI=
Subject key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7950EC76D501DB2469875BDECE10A01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.41.208.0/21
IP: 91.226.6.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0e:c7:6d:50:1d:b2:46:98:75:bd:ec:e1:0a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:fe:6e:34:cd:c0:b1:68:d9:fa:26:96:ca:
7d:9a:2a:15:4b:3a:fe:a3:06:21:d6:6b:7b:2f:81:
fb:e3:8b:4a:35:1f:46:04:73:3e:55:cc:25:f0:39:
6e:eb:0f:83:8c:b1:91:59:66:4b:19:77:f8:f1:f0:
98:a5:11:5d:d3:b2:17:b4:1d:68:62:f2:d8:e7:d9:
ca:8c:e1:1c:86:d3:28:a4:b4:5b:cc:6e:41:b6:ea:
2c:5c:c5:1b:2c:18:20:ac:b2:78:8d:a5:c6:49:71:
6f:16:b1:b1:3c:7a:bb:bf:0a:4a:e1:de:73:4b:a0:
86:7f:5a:dc:43:6a:11:fb:f2:31:6c:b5:d9:7c:a6:
21:db:cc:39:55:a8:82:36:9a:68:47:2e:31:24:47:
1a:81:d3:76:b9:92:91:2a:96:31:0d:b6:16:1c:e5:
9d:12:ec:e4:2b:f5:36:7b:ee:63:2b:9b:ca:ec:98:
86:e0:f6:7c:32:c3:6b:8b:4d:ff:e5:e9:2a:e9:d8:
ed:c7:ea:6e:3e:3e:7d:a0:16:bd:d3:3e:65:49:dd:
62:3c:01:51:ab:a3:83:d8:1e:9f:95:7d:99:ea:b0:
6d:cd:de:0b:fa:f0:39:0c:1b:c9:b6:22:d5:95:24:
f4:fa:14:d5:0d:24:c2:ac:e5:f1:f5:79:13:6b:36:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.208.0/21
91.226.6.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:a7:f9:4b:5e:76:cb:22:a9:03:9c:16:b3:66:3f:65:6e:7e:
6c:bb:d5:ee:7b:f5:54:f6:c0:23:ca:0a:bf:88:3d:7c:e6:78:
c7:80:4b:15:08:fd:b8:f7:70:39:f8:b2:58:ae:8f:c4:d3:81:
ec:37:b2:65:8b:00:43:f2:c1:51:38:a3:3d:3d:25:87:4f:e6:
b6:13:20:8e:d6:bd:a6:bb:18:2f:be:b1:53:23:76:0d:12:7d:
a5:9f:8a:da:59:4a:94:8b:0a:78:c9:22:d0:0a:68:d0:2f:8a:
f5:ba:e1:d5:77:fe:6b:8c:4b:3b:55:62:fc:90:39:50:71:b6:
0a:dc:bc:4f:d1:84:5a:e1:cb:ca:54:5e:13:1b:61:e2:38:d9:
12:08:bf:ee:c2:78:90:ea:65:8e:ca:0d:b9:39:66:4e:b7:69:
49:85:fc:db:22:8f:bc:f6:e7:6d:93:73:62:e1:23:40:85:0c:
63:94:c2:79:bb:7d:4e:a3:ef:1f:c1:29:b2:31:5c:78:fb:91:
0c:5d:56:11:40:c6:ab:6b:05:6a:e6:8e:e5:bc:da:e5:9c:75:
fc:65:eb:84:ef:82:6f:99:fd:18:5c:8b:cb:e1:7f:e5:3f:7b:
9f:7f:c1:27:c2:49:04:e1:0e:19:e6:4d:d0:76:a3:7c:e7:ac:
da:3b:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:52:52 2024 by rpki-client on console-fra.rpki-client.org