Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer
File: GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer (raw, json)
Hash identifier: 9iodeq2HUdaIpDOhdolwnhP2DV9fuo5gx4Em5TqrGoU=
Subject key identifier: 1B:22:CD:F5:32:49:04:9D:04:91:4B:18:37:FC:02:7D:69:64:CE:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7272C12067D135115A9BEC0A47C3776
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.212.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2c:12:06:7d:13:51:15:a9:be:c0:a4:7c:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b22cdf53249049d04914b1837fc027d6964ce07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:7c:f6:69:0f:77:4c:c7:a6:88:72:0d:e2:
a8:f4:96:bf:55:cf:e6:ce:58:71:95:d8:66:f8:d1:
81:75:e0:ae:5d:d8:18:96:10:aa:5c:1c:63:ed:b5:
bb:16:bb:4b:42:70:3f:a2:48:52:ec:77:4e:c9:12:
1d:7b:5b:14:3f:0b:a8:0b:07:a1:99:41:bb:71:24:
fa:16:52:15:00:75:4c:c1:f0:e9:cc:e0:b3:f7:b6:
e0:06:0e:22:3c:40:be:24:3f:3d:42:cf:fc:dd:0d:
6b:dd:65:93:34:aa:41:0b:14:82:7b:6a:71:ae:43:
e8:d3:cb:ce:1b:e5:5e:79:a6:23:ae:ef:c7:ba:30:
1a:58:da:c8:65:7b:e5:f6:b6:cc:e2:76:7c:e3:b0:
f8:04:9b:76:d5:34:23:01:2e:90:00:54:9d:10:8d:
f8:62:06:5f:ad:34:af:42:48:b9:78:8c:15:2e:49:
0c:c5:c5:ed:20:16:2c:4d:ca:98:1f:6c:c5:60:9a:
5c:33:4d:73:2a:fd:96:24:75:be:67:d2:1e:0c:41:
41:4c:d5:92:56:14:e3:e3:36:7e:ce:59:9a:dc:2d:
6b:c5:ca:a2:77:b0:14:20:c0:24:2d:8e:ef:0b:0e:
15:68:bf:b2:ee:d0:6e:f8:21:f7:75:1e:ec:93:2b:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:CD:F5:32:49:04:9D:04:91:4B:18:37:FC:02:7D:69:64:CE:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.212.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3a:ab:d3:0a:7d:0d:92:a3:4a:85:b3:2b:07:02:37:52:43:
48:26:95:a4:3e:b4:c0:97:46:80:69:1e:d7:93:ba:cf:70:1e:
a9:c6:ca:55:6d:33:15:aa:ea:b7:29:75:c1:86:fa:06:a3:2c:
63:d3:8c:51:60:f8:fb:21:f6:e6:88:50:87:b3:69:8d:83:71:
87:8c:33:de:28:97:27:b9:2e:d0:06:f7:33:6c:7b:e0:7c:65:
e3:e1:50:66:15:9c:c0:41:ea:35:77:21:54:b4:61:d4:98:e8:
08:30:96:09:39:7e:b9:c7:30:89:03:a8:2c:33:08:9a:f9:61:
d5:1b:f5:e3:e1:fb:19:d4:db:dc:77:c0:aa:a7:a9:82:56:6c:
3a:3c:a6:5d:3b:54:e0:a8:f6:c8:2b:f2:d4:af:03:37:18:19:
ff:70:ee:70:8d:23:9b:5b:6b:67:87:fa:e9:76:ba:3f:83:88:
03:ec:cd:0b:02:94:71:a5:5c:5d:53:c8:88:b0:f5:66:15:6b:
01:43:30:53:85:af:99:d1:e3:fb:a7:fc:c0:a4:5b:6e:47:08:
0a:78:f8:7f:eb:4b:d0:6b:fb:da:48:d4:b8:fd:56:ee:ff:fe:
cb:6a:ff:d0:71:70:a4:e7:a8:c8:0e:17:47:14:17:e3:3a:9a:
ed:08:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:57:31 2024 by rpki-client on console-fra.rpki-client.org