Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
File: CvPkI70elzal9deE7JKZ1QgnJ9w.cer (raw, json)
Hash identifier: BWb+2DZP1LSuQx5hzk2j6HqUK9iDyHOFmF1kabUaAXk=
Subject key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192E1ECF72713325055819ED7D04A6A26A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Oct 2024 09:34:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 83.242.0.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:ec:f7:27:13:32:50:55:81:9e:d7:d0:4a:6a:26:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 09:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:26:b6:76:08:2c:11:6c:d1:d3:8e:56:ec:
bd:dd:58:14:29:10:bc:4b:c2:eb:91:a4:0e:b4:12:
b8:72:a0:9c:c2:14:3b:16:75:84:94:d4:bd:17:97:
88:b2:b9:76:81:90:0a:e8:b3:68:f8:5c:79:3d:92:
ec:59:75:a9:e5:c9:dd:3e:e6:44:51:bd:5d:5f:24:
d0:da:f8:57:ff:92:6a:aa:33:d9:03:77:2f:44:d9:
d4:b8:b7:77:5a:9e:7f:d2:4d:9d:01:ea:ff:f6:03:
68:ef:67:30:04:31:10:7a:19:9e:39:d4:d3:64:f6:
17:fc:ec:27:1e:fb:7a:e5:97:86:bf:a2:b6:f6:15:
65:8e:7c:5d:c0:e7:a8:fd:fb:df:05:ee:5f:79:f9:
eb:74:42:62:dd:8c:64:91:a5:76:80:42:6e:3f:ed:
2d:12:71:0f:5b:b8:ac:99:2e:20:56:f5:86:b3:70:
ee:0b:9c:7d:fb:97:1f:60:36:7d:3d:72:66:5e:fe:
f9:d1:38:1b:60:b3:fb:53:02:2f:27:91:c8:29:e6:
d8:89:94:e9:00:25:b2:09:92:31:51:12:a4:3d:10:
8e:5f:32:54:5c:e6:eb:ae:8e:a7:c6:a2:d3:12:26:
44:44:76:20:07:a3:78:14:b5:db:b3:89:f8:14:7c:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.0.0/19
Signature Algorithm: sha256WithRSAEncryption
30:02:18:d4:41:86:a7:21:b2:1b:ba:03:8b:47:01:4f:6e:8a:
73:7b:fb:f3:83:25:3d:3a:1a:56:43:a7:af:6d:9b:38:38:d2:
9c:25:7e:bb:ac:6c:15:da:f8:98:50:0b:36:c6:d4:36:62:2a:
83:37:9b:ed:11:4e:0c:08:9c:0a:37:0d:68:f6:96:47:5b:fd:
cd:03:5f:44:ec:de:8a:9b:1c:e6:a6:05:20:74:7b:25:33:be:
b3:d2:52:ad:aa:17:a2:26:17:fc:c8:b3:0f:de:0a:65:d8:64:
f5:f6:9d:2a:5f:9c:7a:11:11:69:88:e9:96:e2:b1:fe:c7:80:
74:f9:3d:81:32:bf:5e:f9:53:32:7c:89:fc:5e:99:e9:78:79:
4b:43:0d:62:a9:26:f4:17:63:48:22:74:4d:26:e7:24:ed:18:
88:2f:cd:5d:6e:34:9b:93:e8:e5:00:88:54:fa:85:e0:c4:b2:
d2:ed:b7:a6:76:1a:1d:b5:a1:52:9a:1d:89:e5:ac:82:89:19:
f8:e6:0b:6b:b4:67:92:81:30:68:fa:9e:2f:fa:03:28:67:aa:
5b:9e:04:6f:e6:fe:4a:61:b0:cb:ea:8a:b6:45:86:74:8c:8f:
c0:6d:86:1c:32:f0:c3:c8:2b:ba:2a:d0:59:a3:7c:8e:73:bf:
78:80:d1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:05:21 2024 by rpki-client on console-fra.rpki-client.org