Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
File: CxhwyW7wlyOBH7iSUO6m66ljwN8.cer (raw, json)
Hash identifier: HjYFS8oVgjkNMmQDmC1MlmNq2svgIPyp8wdeJ1WOw6c=
Subject key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E076F9358F5F1A9E0DB0EBEA2471D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 132.64.0.0/15
IP: 192.114.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:07:6f:93:58:f5:f1:a9:e0:db:0e:be:a2:47:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:a1:7a:61:6f:09:82:db:b0:9a:30:2f:41:
cb:ed:12:99:f8:af:5b:82:cf:14:75:f4:ce:a8:5f:
45:13:a4:19:35:51:b1:16:ca:1b:4d:73:30:4a:ca:
2e:c2:57:b0:28:7b:60:85:85:46:df:c4:95:f7:ef:
c1:6a:bb:ec:f7:34:8d:01:20:13:b3:37:64:bd:9b:
59:00:18:98:c1:0c:29:c1:c3:1f:48:c4:3c:fa:7a:
c2:13:35:2c:f4:e4:8e:bc:31:85:a9:6e:a4:69:dc:
9e:e9:dd:5c:17:d9:2b:30:42:75:f7:8a:9e:c0:46:
97:3e:be:14:7c:c0:07:9e:a0:9b:63:c7:35:07:d0:
3f:d8:ef:29:70:ee:cb:ce:76:26:53:51:5f:7d:67:
3f:94:03:a6:7e:7c:c7:b0:0a:2c:ac:aa:6e:09:4a:
ca:2e:97:f4:2a:8e:fd:63:37:34:63:f7:fa:4c:77:
f2:5d:b8:47:7b:a9:6d:82:25:ee:e3:7f:96:84:b2:
da:a4:8d:a5:c5:b2:4f:b4:9f:0e:c5:76:e7:9f:89:
20:1f:34:31:eb:8d:ff:68:2c:1a:ae:cc:2d:09:26:
13:66:ed:8c:0f:b4:84:75:ea:d8:44:17:7a:d9:75:
8c:37:f5:e2:f3:4b:6e:00:a6:e5:0a:ed:1b:0f:de:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.0.0/15
192.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
28:35:8e:9b:08:4d:b2:ad:2e:ca:77:df:04:2f:4e:a6:8b:16:
00:51:d3:50:c7:e8:10:46:9d:ed:1a:9c:4a:bb:f8:61:ba:08:
29:64:b9:a4:07:f1:78:eb:f7:39:a5:49:30:99:48:61:8f:fd:
93:7b:9b:09:7d:28:fb:6e:30:4a:31:66:f6:da:07:9e:68:56:
77:be:c7:b0:0f:94:26:91:24:6b:b5:e3:08:ab:64:00:46:61:
53:ec:e3:4a:4d:61:db:79:75:5c:03:58:08:a6:6a:d7:14:bf:
db:69:42:74:78:60:5e:5a:da:74:f6:ae:fd:f2:1e:36:5d:d5:
d2:9c:f2:e7:15:0e:d0:47:b4:3c:cb:c7:98:8b:07:16:6f:2d:
6e:e2:8d:a2:a9:fa:83:b4:a6:d8:ba:20:b3:c5:ab:3e:db:d6:
79:f9:68:a8:ed:41:10:ab:a5:e1:92:19:cf:80:cb:64:d8:0e:
ec:09:74:ab:d3:cc:fc:da:23:9a:76:84:1a:9b:36:61:90:14:
c7:79:5e:04:ae:b1:a7:ad:32:6b:43:ed:e2:ad:37:48:11:82:
b4:4b:df:69:b3:bf:69:84:fc:11:35:f5:7d:1e:43:0e:ef:08:
ca:28:be:b8:fa:d6:4e:28:92:3e:7c:e7:0e:2b:ff:9e:da:ce:
b5:41:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:53:42 2024 by rpki-client on console-ams.rpki-client.org