Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fl-HY_uPLn_S87k4BEhPq076ub0.cer
File: Fl-HY_uPLn_S87k4BEhPq076ub0.cer (raw, json)
Hash identifier: adZJbMrKC8jn/lEz449VcKIVs187KRPZNwjEbJcmMIA=
Subject key identifier: 16:5F:87:63:FB:8F:2E:7F:D2:F3:B9:38:04:48:4F:AB:4E:FA:B9:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D045E7CC0D0D0EA90334060B5BFF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/2da576-e416-4f3b-a2fe-97646e3957e7/1/Fl-HY_uPLn_S87k4BEhPq076ub0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/2da576-e416-4f3b-a2fe-97646e3957e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.120.0/24
IP: 2a14:2d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:04:5e:7c:c0:d0:d0:ea:90:33:40:60:b5:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=165f8763fb8f2e7fd2f3b93804484fab4efab9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:68:29:c3:0a:de:dc:22:65:77:bc:d5:6c:
45:17:51:0b:1b:d0:de:a3:82:0f:b1:c8:3e:d3:8d:
5e:7e:ed:84:b9:c7:22:98:84:c4:5e:de:94:b2:78:
f0:72:62:a5:e0:28:94:eb:48:40:e0:03:ec:8c:dd:
7b:ff:88:9c:d9:11:75:ae:bf:0c:fc:9f:41:75:d2:
ef:f8:b9:18:b3:27:db:05:d4:4b:e8:7c:5b:29:ea:
f1:6b:a5:8b:a2:49:62:f5:f6:dd:4c:bc:4c:ab:88:
85:70:2f:b7:b6:0a:13:11:70:cf:3f:78:e0:78:cd:
5d:74:96:fe:ee:cf:09:32:55:a4:e6:04:66:2e:9d:
28:32:22:aa:57:8a:1a:7c:bd:03:39:1b:7f:cc:fd:
f8:fb:c3:d4:3e:60:28:0d:46:c8:22:82:dc:8e:18:
6d:bb:0f:ec:35:6b:42:2b:31:bf:8e:8f:13:fb:2d:
38:ba:ec:83:3d:86:be:2a:bd:7b:dd:6c:14:8f:7d:
63:2b:7c:07:a2:69:33:fe:33:c8:19:fe:68:0b:46:
27:bf:f4:0f:2c:68:08:66:73:ee:dd:a0:cb:ac:d8:
53:5d:c8:6e:7e:f2:2c:2a:ba:8c:9d:28:d6:80:1c:
fe:54:08:e9:e2:e4:9e:85:39:2a:c7:b5:c8:c0:47:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:87:63:FB:8F:2E:7F:D2:F3:B9:38:04:48:4F:AB:4E:FA:B9:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2da576-e416-4f3b-a2fe-97646e3957e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2da576-e416-4f3b-a2fe-97646e3957e7/1/Fl-HY_uPLn_S87k4BEhPq076ub0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.120.0/24
IPv6:
2a14:2d00::/29
Signature Algorithm: sha256WithRSAEncryption
63:aa:22:ec:0c:e4:f6:3d:ea:74:a5:f8:b2:6f:9b:7f:a2:39:
6b:7a:50:bb:35:d6:44:16:1b:91:6e:14:81:ac:d9:97:c2:05:
fa:2f:66:48:59:72:5f:2c:28:46:68:9f:11:fe:56:88:17:88:
39:c4:eb:6c:69:bf:eb:31:65:ec:da:62:14:3a:d5:18:3c:f0:
f5:00:08:47:f5:b4:39:6f:58:77:c7:1b:ee:32:83:92:b5:a4:
d8:a3:ce:cf:89:3b:6b:02:94:7d:1b:b9:30:e3:42:2f:e0:d9:
44:be:c0:14:75:b1:97:07:f9:2c:72:d9:e2:31:4d:30:94:cf:
e1:e0:54:04:08:93:87:fb:25:60:a5:7a:a0:b9:79:3a:53:dd:
22:42:b5:11:0c:4a:90:57:10:06:04:0e:00:53:83:98:df:d2:
07:42:e9:eb:77:aa:c5:77:2b:58:22:21:b5:6f:b4:c2:37:82:
cd:65:15:7f:63:6e:1f:72:0b:90:8e:96:f8:95:47:af:a5:b4:
ea:77:71:35:27:1a:33:59:7a:55:e3:7f:46:15:c0:bc:1d:a4:
8c:e0:ce:d9:63:67:cc:85:b4:87:bf:a8:39:65:e9:96:05:38:
92:ec:c5:11:7b:8a:6e:07:6a:a1:3c:d3:1a:9a:3e:4b:a9:a0:
d5:bc:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:27:43 2024 by rpki-client on console-fra.rpki-client.org