Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
File: Em_8AJbGk7vEIO64zO80vHtTh0M.cer (raw, json)
Hash identifier: sO5O4HZsXRit0N+5QdbOXAhvRkZ69KPkmUz4UF6uReA=
Subject key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF46674E9D64C9EBF32BEB1E91D66F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.203.18.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:46:67:4e:9d:64:c9:eb:f3:2b:eb:1e:91:d6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:41:54:8d:a8:df:4f:78:3e:3a:68:7c:25:
19:e5:29:31:f4:a1:68:42:5f:56:5e:92:35:75:15:
35:29:80:08:8f:c8:c0:30:9d:23:2e:e5:94:70:7c:
af:87:6f:db:1b:b2:f0:55:12:e1:79:99:2a:64:fb:
49:e8:15:d6:ee:ba:43:de:cc:28:ae:d7:0c:92:82:
af:1f:64:88:5b:98:4d:5d:d8:6c:3c:70:42:cb:80:
78:cd:43:f8:dd:66:fe:b3:d2:8f:1f:d5:84:7c:b3:
55:c0:d4:c6:75:08:5a:58:3f:19:3b:f8:0d:dc:f0:
a2:ee:a1:47:5b:1f:c7:bc:57:71:1d:43:80:4d:e3:
7e:f1:dc:d0:52:21:b7:a3:1d:d4:10:33:93:61:d5:
67:5b:e8:01:e9:02:0d:a4:be:56:4a:95:61:ad:8f:
25:bc:bb:68:50:50:90:8f:fa:74:02:5f:20:59:bd:
06:92:bd:b2:af:b0:6b:e4:2c:00:1c:00:fb:e9:70:
0f:8e:f1:79:72:0a:78:83:3e:99:7a:cb:c3:7d:ff:
51:af:ed:4f:ec:35:30:98:43:68:5e:6d:00:f8:7f:
d9:fe:88:a0:46:7f:e6:fc:70:cf:f2:06:30:a8:91:
8a:3a:6a:10:13:a0:a8:e7:f4:84:c1:f2:e0:4f:db:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.18.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:2a:3f:e9:63:ad:98:a1:70:01:8f:08:e5:87:99:a0:5a:98:
f8:03:fb:7a:d7:29:b4:9e:12:38:a1:69:49:d7:4c:77:ec:dd:
a2:38:cd:e5:ee:9a:f8:e5:15:76:d0:c9:32:af:7d:2b:77:44:
28:f9:b6:03:2e:e6:15:f2:eb:8f:24:2d:f6:04:82:36:c2:4d:
d1:4b:fa:1c:ba:38:d4:66:f4:83:74:19:23:80:8b:ca:0e:60:
05:fb:2c:9d:a0:9c:01:03:d5:97:c1:aa:5b:ca:59:e2:5d:51:
c7:77:70:65:4c:d0:9d:80:de:ac:0d:ae:08:c6:6f:41:50:fb:
5d:8c:85:b4:5c:2b:b8:52:63:f5:5a:c6:03:65:bd:58:a6:d7:
37:34:18:75:8b:b3:0f:ee:a8:11:8a:60:cb:eb:57:ab:57:c2:
76:c5:6a:aa:ff:62:ac:9e:47:04:3a:93:62:45:4c:5b:d4:06:
db:9b:2b:b3:24:e6:47:cb:f8:3f:ef:bb:37:8d:16:dc:ee:e7:
88:53:ef:18:e5:dc:80:ba:5c:87:b0:e9:bd:12:6a:b4:5c:33:
e0:fe:88:03:80:bd:7a:77:e6:d1:f4:97:34:cc:c1:b4:59:23:
f9:58:0c:c6:76:50:c0:67:ac:43:71:b9:50:a7:dd:ea:e8:4e:
bf:97:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 10:26:13 2024 by rpki-client on console-ams.rpki-client.org