Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
File: KuSoz5RAPH-drSfzyf_nMehrd4c.cer (raw, json)
Hash identifier: NEmvnK1qKExVZM9W/NMNTzWfyE05o3mxms1N23m0Mb8=
Subject key identifier: 2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B4160F1398F04151D9E6136E84873
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.86.248.0/22
IP: 2a05:bcc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:41:60:f1:39:8f:04:15:1d:9e:61:36:e8:48:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:15:d3:64:e2:2b:81:b5:c2:36:7e:58:d3:
84:25:70:43:15:b0:87:05:b2:3c:e2:99:7a:fc:b5:
2e:82:d4:c1:15:6b:ee:7a:4a:3f:be:78:83:8c:e9:
ce:b0:82:3b:11:42:7f:4a:c7:a3:6f:95:e0:0f:65:
af:87:90:0d:55:51:97:ae:b3:63:be:49:40:07:1c:
31:42:c3:30:30:8a:37:20:58:ff:76:44:93:36:05:
cd:b1:b7:14:fd:a7:02:6e:66:c3:dd:65:6c:52:78:
45:b5:06:84:68:b0:fb:56:43:b7:bb:d2:17:00:00:
2e:06:29:9e:19:cf:a8:15:36:2e:a5:d7:b5:0f:34:
79:8f:f9:85:55:eb:ed:58:87:c0:1f:d0:9b:ab:26:
85:5c:dd:f1:ad:f4:72:15:91:dc:ca:e1:fc:4a:75:
32:07:c5:d8:3c:a5:fc:ea:55:2a:76:5f:71:39:51:
67:18:53:be:1d:0c:6a:46:33:03:28:2d:03:af:64:
70:b3:93:d2:00:07:9e:3f:bb:dc:c6:f5:29:4f:a1:
cc:27:08:a2:21:59:47:92:ab:cd:6d:fa:71:7c:43:
fc:5c:a7:5d:18:e8:b0:71:2e:74:4f:e4:0c:f8:ca:
a9:71:67:bc:5b:05:a8:9f:60:43:83:36:6a:19:82:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.248.0/22
IPv6:
2a05:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:b7:ef:e3:49:0e:ae:84:f3:31:af:b9:d7:f2:21:54:2c:63:
68:1d:0d:9f:fd:48:63:0b:a2:d5:a2:93:c8:f1:69:b0:f6:34:
57:07:2a:09:40:d8:40:dd:ff:18:38:07:ec:9f:be:0a:47:7b:
06:a3:3e:49:67:07:85:03:c2:3f:45:4f:9c:0e:e1:a9:0b:c1:
95:f1:1d:3e:84:10:22:46:01:7b:2a:8d:6a:5e:82:bb:63:f4:
f6:f0:b4:af:ac:9b:89:b4:f4:7c:79:90:27:71:0e:fb:98:31:
9a:bb:d0:12:e6:e9:f1:8b:f8:32:ae:52:18:37:d2:36:cb:41:
d2:02:2f:63:01:2c:7a:a1:32:16:84:8e:b5:41:8e:48:f5:7b:
c7:26:19:64:b4:90:15:c7:6c:b3:d4:fe:a9:cb:a0:ec:ec:2d:
71:68:4d:c3:52:f4:eb:f7:f0:e6:ed:0b:f3:e2:20:cd:33:dc:
32:c7:e0:b0:ac:99:5c:04:52:a4:7c:14:80:6b:11:e8:9e:68:
8e:14:2a:c3:17:dd:65:2f:2c:bc:2d:68:5a:e8:d6:5d:74:4f:
00:07:b7:ce:44:78:83:68:8d:f8:74:aa:36:ba:97:a6:24:f0:
51:1a:a8:7d:c0:9e:a3:e1:5b:05:92:9e:90:e2:ca:9d:36:4a:
3f:50:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:28:48 2024 by rpki-client on console-fra.rpki-client.org