Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer
File: K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer (raw, json)
Hash identifier: CXQvSG3AYsI7RCG80POjLvlVksGKOdk6YgZ4IsvHYFU=
Subject key identifier: 2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCFC739F71341F092768AF95309679
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.29.227.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fc:73:9f:71:34:1f:09:27:68:af:95:30:96:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:44:da:04:05:2b:50:80:7d:e2:18:15:d3:
a5:fd:fd:83:a8:71:ec:28:f4:af:29:c2:15:35:c8:
83:da:c2:a1:f5:6e:01:a9:80:0c:0d:0f:c3:3b:38:
4f:be:ba:ce:3b:b5:c6:3c:48:ca:84:0f:69:68:53:
e5:3d:71:bf:31:56:5e:63:41:1f:ed:d0:c1:80:5d:
5b:9f:d3:79:5f:e4:08:a8:d4:ef:7f:dc:b5:10:55:
a9:f8:c9:9b:c2:1c:98:24:4c:ab:5d:f4:70:1e:4d:
06:8e:c2:0f:36:27:66:8f:a9:8b:c3:bc:f2:52:cc:
bd:f6:92:45:72:08:4a:9d:05:af:30:d1:59:1a:98:
27:5b:69:4e:ca:90:4e:7e:0b:81:38:54:d1:26:b6:
79:f1:04:e2:f4:59:19:80:65:5d:68:31:6c:1c:84:
9b:a2:d8:2a:33:05:b4:38:85:87:7a:06:12:25:2d:
fd:84:08:83:ca:40:a9:e0:ce:7d:5a:b6:c0:0b:50:
ac:27:2e:44:d1:27:39:a1:fd:30:48:bf:eb:8e:55:
17:32:99:66:f4:aa:cb:d2:f1:72:0e:a6:e6:c4:a1:
e6:43:92:8b:ff:ce:0a:a5:07:3f:50:af:a3:d9:b4:
4e:d2:85:c2:d9:ca:27:b7:b2:f7:3e:de:5b:46:37:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:aa:d6:c1:c5:ed:13:30:74:c5:2c:51:c1:9a:73:7b:7c:9b:
ef:ac:a1:4c:c5:c2:6a:3c:55:7a:ba:8d:f2:ff:a2:ed:74:67:
d0:eb:fb:32:46:04:a8:a9:d7:27:65:9d:11:1d:fe:b6:05:0f:
2e:ad:47:6c:9c:3f:25:c2:b5:f6:b0:ad:c8:25:8e:9c:d1:dd:
2b:60:0c:ca:9a:13:b0:fb:e8:a4:d9:69:cc:85:bc:dd:ef:0f:
32:29:a2:7c:62:90:03:12:85:71:da:48:f3:7e:e9:d3:21:55:
a4:2d:2c:30:e7:af:b0:e5:47:aa:e7:42:93:32:6e:af:34:59:
17:56:d4:6c:35:27:56:af:c6:3d:f8:8c:02:f8:a8:63:32:4f:
8f:8a:f8:54:0f:e1:ee:35:3a:fd:12:e5:42:c8:bd:62:8c:5a:
a9:de:b6:1a:37:7f:6a:c4:40:88:53:96:91:bf:a5:67:4f:41:
58:5b:b6:9b:23:d8:62:c7:a0:06:90:45:38:4c:42:53:14:d6:
bb:78:e2:1a:ca:ef:80:0e:4e:98:9e:95:82:40:28:19:4f:41:
39:d5:1e:9f:4e:e6:50:d6:11:88:b2:f7:a1:fb:c2:7a:98:ec:
7d:43:d5:ac:4f:8b:0e:fe:01:8a:d9:c3:62:ae:dc:90:2c:6d:
db:c1:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:08:25 2024 by rpki-client on console-fra.rpki-client.org