Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.cer (raw, json)
Hash identifier: 4egJGzHLWiajd8S9RFZZMj8NXE6b3llLV2BBfplWLD4=
Subject key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E18191B5B7BD96B34797658DA6362
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.199.75.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:18:19:1b:5b:7b:d9:6b:34:79:76:58:da:63:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:cd:62:a4:79:e4:4f:8a:c9:64:e5:26:74:
9d:01:13:10:d8:f8:82:17:e5:97:e5:cd:7e:d4:9f:
4c:ef:3b:8c:e5:8d:2a:41:f4:17:43:ad:01:ee:68:
a3:f5:da:1b:28:7b:a3:6a:36:a9:ee:29:29:3b:4e:
1e:09:16:c8:fa:ce:02:6b:bc:7d:c3:a4:08:0b:2a:
d0:ed:98:0a:b8:26:73:c2:ee:73:10:43:2e:56:a9:
ab:40:3b:eb:49:00:51:f7:07:2b:1c:22:6d:58:2f:
b1:15:93:ee:b7:0d:5e:61:2f:32:fa:e1:f6:eb:dd:
ec:f0:bd:73:8f:ee:69:a3:12:9f:cf:6a:8e:2c:28:
f6:6b:a5:bc:ff:b7:5d:f1:c4:b1:6c:c8:bd:11:39:
16:1a:6a:6e:17:7f:1c:fb:29:79:b1:ce:fc:18:06:
c8:84:9b:ee:8a:b2:e0:f9:d3:0a:ca:df:85:75:94:
3f:ed:c1:2d:d6:69:9f:a5:ea:63:45:d1:a6:93:b5:
cb:16:6f:58:1c:24:93:29:5a:a9:fc:8a:8f:18:17:
ca:d2:9a:57:bc:e3:fa:cd:11:04:f5:65:78:03:ed:
76:13:96:a8:c6:a5:31:72:6b:88:e7:ba:0e:18:35:
9f:30:9e:81:26:e3:0d:65:12:53:27:64:a2:83:ae:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:43:0e:f2:6e:fe:6d:de:10:da:37:31:2f:21:1e:82:4a:0e:
6c:42:5c:bc:2d:25:6f:62:45:bc:8a:72:74:81:17:2a:a6:6d:
0a:1e:d1:e5:50:09:80:a9:61:5b:e8:27:d8:29:b1:a8:31:11:
05:64:d6:a8:c4:11:64:37:11:42:c4:d2:2a:8f:2c:89:3b:4e:
a1:47:47:76:ce:3b:49:2e:88:f6:38:95:8d:77:de:4e:4e:ca:
a4:66:e1:5f:87:1f:df:cd:f5:8e:a1:86:f5:14:51:99:d2:92:
4c:89:f7:91:ca:99:34:1e:95:ce:0c:a1:6c:fc:6d:4f:33:7f:
23:ca:e6:0f:a3:ed:c9:b7:71:30:39:13:03:8e:79:92:6a:27:
25:00:bd:b8:6f:51:7c:88:08:d1:89:e7:26:b5:e9:c0:a9:04:
41:2b:18:81:1d:7e:cc:37:12:e2:49:e0:56:7c:60:cc:02:b2:
9d:97:a5:72:eb:1e:a2:e7:89:91:76:80:28:65:0a:9c:fd:b0:
fe:af:4c:c7:b2:af:4e:7d:7e:d8:3e:e9:33:01:9f:9b:33:4e:
e4:75:55:d4:a4:8f:1c:9a:f7:ac:5a:54:cd:e9:ee:90:dd:f1:
33:8f:08:c4:22:8e:92:7d:ff:c6:28:d6:a8:1d:bb:43:cf:59:
56:31:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 04:39:01 2024 by rpki-client on console-ams.rpki-client.org