Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer (raw, json)
Hash identifier: ETIF18vhzj3F4sIPBwdk6L8QbccsT4aWt1jjWKQjzAY=
Subject key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC26D5849F997A24AEC7BC4C694BB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.5.144.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:26:d5:84:9f:99:7a:24:ae:c7:bc:4c:69:4b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:fb:57:a8:86:58:f5:c3:0c:f9:3d:d6:ef:
46:0d:8a:60:8a:f1:7b:8f:8c:bd:90:aa:00:b5:93:
c0:98:8e:f9:f9:11:83:1d:9c:8d:6c:2e:1f:9e:a0:
9d:20:62:a8:38:f1:b4:4e:1d:c3:7a:f3:ae:22:38:
54:8a:2f:5a:b6:64:df:16:b8:5a:1b:73:90:7f:17:
f5:d4:5a:da:49:3d:f1:86:4c:80:f0:72:72:21:9a:
57:88:31:d4:a5:cd:cb:33:6c:e1:28:87:c0:6d:34:
8e:19:47:62:4a:5c:dc:35:94:04:82:d9:de:63:6a:
42:80:67:6e:5d:08:3f:83:49:ee:74:d3:af:8e:d9:
d6:70:c3:f3:5f:84:dc:7a:95:1a:3b:bf:58:05:62:
8b:6a:cd:9d:d6:0b:4a:65:ba:b6:56:cb:d9:5a:5b:
55:5a:2c:16:c5:6f:f4:70:fa:7d:cb:5a:af:98:2b:
22:b7:75:e2:50:f6:b1:fc:b0:09:31:d1:d5:07:d8:
48:bc:cd:ef:0e:e6:93:be:28:6c:ca:32:01:f1:48:
d8:f5:3e:ba:a2:aa:c2:6e:27:94:b2:ae:80:5b:62:
d0:75:af:8d:b0:38:cc:09:78:c5:e4:00:3c:f6:0c:
f3:07:d8:5e:af:67:c0:66:95:df:c9:ce:8a:c5:46:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
09:66:ce:1f:72:d7:d0:2a:84:4e:e5:76:03:1b:87:11:ac:33:
8c:0c:f4:b4:11:58:99:31:88:3a:6f:90:e5:f2:fe:d9:1f:1b:
fb:d6:a5:08:d0:bd:f7:38:8d:78:8d:d2:ff:b4:95:63:85:42:
65:80:ca:25:e5:06:46:32:ee:7c:d3:15:dd:fa:75:a1:dd:e2:
93:97:6a:5c:34:0f:2e:84:8c:5f:0b:4d:f6:84:3b:75:90:7c:
2f:b6:70:6d:f1:6a:30:9e:45:12:9d:61:14:ea:0f:b9:94:09:
3f:99:e4:c2:ef:b3:7e:8f:af:6c:9b:d2:18:a3:9a:86:13:a3:
da:dd:57:85:ad:b7:dc:37:d3:ca:97:7f:b9:e5:b6:ed:6c:f7:
28:fd:46:4e:4b:56:a2:3d:6f:fe:02:23:d5:a5:94:7a:a6:2a:
de:57:dd:32:4e:3e:e8:72:56:f0:31:4c:c1:9d:06:42:12:a7:
40:db:d7:f4:b1:b2:0c:e3:1e:40:90:a9:e6:2a:35:a3:66:cb:
bc:41:a4:4c:e5:1f:86:8e:ba:59:dc:a9:69:6e:a1:b7:d2:36:
e9:ce:5d:ba:42:bb:db:6c:af:d9:c8:6e:91:ef:a9:44:41:82:
b5:c5:ba:06:c3:a8:4d:53:4c:17:ed:c6:c9:73:5a:7b:42:48:
d8:ba:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:07:49 2024 by rpki-client on console-fra.rpki-client.org