Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.cer (raw, json)
Hash identifier: mMBMkFLAaO/p2PwJwxW8rzOiDULrCx7erZxUzTFhq8M=
Subject key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42516395C34FDC4BB9553EE55EADB7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.88.112.0/22
IP: 2a03:7f20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:16:39:5c:34:fd:c4:bb:95:53:ee:55:ea:db:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:76:1d:4e:47:ba:0d:84:0d:f2:b0:32:73:
d5:f4:b6:12:97:d9:12:f8:ca:91:eb:86:b8:cf:c0:
68:c7:44:c3:ff:8a:b2:60:ba:b1:df:38:33:dc:3d:
9c:70:2a:57:ac:4c:c8:f7:a1:bb:15:8c:27:2f:4d:
af:fa:15:68:b2:02:10:82:8f:87:c4:25:4e:74:71:
90:a9:53:0d:50:b2:2c:7e:60:d7:1a:5c:72:7a:d5:
4b:e4:ef:e2:bb:5c:aa:f2:8b:dd:4d:49:c6:20:b8:
c2:6b:d6:61:44:da:1b:1c:e6:4a:8b:9a:c9:66:2b:
3c:65:1d:bb:e5:9f:df:f8:c7:d3:2d:d7:d6:b7:48:
39:f8:3c:78:3c:80:76:2d:e2:43:4d:eb:a2:f7:bd:
ad:5d:b3:52:81:df:c0:13:cf:f8:cb:02:ec:17:55:
af:47:78:5b:7a:f4:2a:c9:d8:0e:25:9f:e8:26:56:
06:06:d7:d0:93:8d:c9:72:bf:9b:9d:89:dd:53:a9:
5b:51:82:3d:be:94:4d:7c:0c:da:5c:4f:ff:9a:21:
26:f3:df:f5:24:01:bf:1e:03:96:ab:1b:6e:47:84:
bd:bb:62:5e:76:9c:ba:90:ff:49:40:5c:e0:88:ef:
14:66:39:63:38:e1:2c:b6:00:21:22:08:e9:4e:71:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.112.0/22
IPv6:
2a03:7f20::/29
Signature Algorithm: sha256WithRSAEncryption
8a:6c:1b:93:cd:68:1c:76:19:18:0b:e7:8e:53:d4:cb:36:39:
af:e2:f6:d7:ad:a8:ca:d2:38:92:08:da:08:c2:f3:03:df:5c:
5e:cf:4e:39:23:67:5a:97:7f:42:ed:44:40:f8:e7:3a:ce:34:
a3:7d:e8:d9:73:79:c7:31:26:27:a4:cd:1c:0d:9a:82:4b:f3:
b6:da:d4:bc:58:bf:ca:44:58:e0:05:9a:20:75:0f:57:74:85:
e5:ae:c1:e1:70:15:f8:2e:7e:a1:13:a2:fa:39:0d:e6:96:b1:
de:e1:80:f9:b2:6d:06:c2:06:e5:ef:46:0d:35:57:37:5e:0c:
20:5a:32:5d:20:33:12:69:5f:6e:ec:17:f3:ca:e8:df:62:79:
4d:22:79:16:6d:c7:60:81:0e:03:7b:75:1e:61:e0:75:bd:37:
d1:62:35:7d:4e:70:a2:f7:54:18:22:90:84:bc:34:3f:a3:07:
d4:00:5c:8d:70:43:84:67:3a:b5:97:da:64:4f:4f:ea:50:8a:
38:ff:74:3a:c4:90:9f:b2:1c:ec:af:d0:af:2b:e0:51:3c:93:
3b:0a:4a:77:e6:eb:32:f5:4f:75:d0:23:5e:8c:4f:bc:bf:bd:
d7:45:2d:d5:96:c5:dd:81:6c:2f:c3:f4:d6:a6:74:44:a7:87:
96:4e:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:01:50 2024 by rpki-client on console-fra.rpki-client.org