Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer (raw, json)
Hash identifier: Z64e6zWA8dXbrA1qu77JREB92XdAqmaZwg4roct3x4E=
Subject key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC795212AE2E3F550F672106395EF9D04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.127.28.0/22
IP: 185.245.100.0/22
IP: 2a0c:3c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:21:2a:e2:e3:f5:50:f6:72:10:63:95:ef:9d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ec:94:ae:31:b2:43:62:2b:7f:cb:8a:53:e5:
12:80:d5:d1:6b:86:f2:8f:21:fd:84:7e:31:0c:8e:
fd:c9:0b:ef:d8:b2:63:40:00:55:25:55:c1:2a:a9:
c2:15:3b:20:f7:ad:74:29:02:f6:01:68:7b:a0:32:
78:9d:14:ef:d5:1d:d2:cd:2d:8a:48:05:bd:2b:ec:
ed:f0:51:b1:8d:dd:25:ee:02:96:98:49:ae:13:02:
9c:76:0b:29:2f:a5:2a:1a:89:91:f1:ab:02:b0:95:
a8:35:93:8b:f9:9a:ee:f2:d3:96:8e:13:10:b9:11:
9a:ba:2f:0a:ce:3b:bf:d8:e3:f3:d1:12:4f:e3:19:
ec:7e:2d:a6:13:83:e7:d9:5b:57:e5:0c:10:c6:df:
c8:28:1c:74:06:f8:ba:54:f3:cb:75:9b:ea:4f:57:
21:89:9a:8f:a2:8e:2f:f8:e3:df:03:8f:c3:45:4b:
25:0e:c8:93:fd:49:65:87:b9:9a:78:cc:cc:7f:88:
99:e7:3d:20:7a:2f:64:c0:47:15:49:88:ee:d4:9e:
8f:8f:22:a6:1c:af:a6:b5:72:52:86:f6:e4:61:ce:
32:22:fe:a7:7a:6e:18:6a:dc:4d:e3:ae:db:7b:4c:
42:d3:ff:c8:cb:d5:11:a6:4c:88:3c:fd:9c:4c:8a:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.28.0/22
185.245.100.0/22
IPv6:
2a0c:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:e6:18:a8:23:ac:19:a9:e1:05:64:d0:17:04:f9:fe:b6:db:
76:78:b5:04:30:0e:57:0b:7b:e5:60:81:26:3c:34:e3:6b:09:
85:7c:34:3f:cc:ce:30:ea:39:a4:35:19:d8:80:4f:80:28:d4:
75:8f:04:04:67:97:31:ba:a1:4f:b4:2d:06:7b:8e:ad:f8:e3:
b6:cd:57:a6:fa:f0:7c:92:e7:27:7d:3e:1f:7b:e9:89:64:a9:
4a:9a:92:6a:82:4a:ab:54:f1:13:3f:c5:7b:19:bb:43:c1:77:
eb:c5:4e:78:c8:92:63:6b:52:d5:d2:da:ea:7d:33:e3:45:67:
86:82:2b:bc:0d:fb:83:76:cc:34:75:be:4b:1f:65:72:c8:f2:
5a:b3:88:dd:bf:d1:da:ec:23:d0:2a:af:4f:f5:a2:b7:1d:0b:
7a:d3:41:2b:ab:16:17:e6:41:5e:0d:0e:2d:06:fa:31:65:ab:
78:f4:1d:3e:00:ed:db:d7:7e:2e:9d:f5:41:1b:a7:ea:f0:64:
cf:c2:45:f0:f6:d9:f5:1d:ad:69:bd:86:b8:8f:af:3b:8b:ee:
5f:68:df:e8:ee:33:33:e5:11:0c:c8:35:2b:5b:a4:2d:8a:c2:
a3:df:06:61:e6:3e:9f:9c:83:6b:d6:10:a6:fc:76:76:00:5c:
09:58:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:20:11 2024 by rpki-client on console-fra.rpki-client.org