Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer (raw, json)
Hash identifier: jeJJvHHkSNa5TsO6nGZZOq23fnLB0PgjIu5WEXtjKdI=
Subject key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF043866033DF3AE93D2D20D0B182C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.227.75.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:04:38:66:03:3d:f3:ae:93:d2:d2:0d:0b:18:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:0d:5d:09:3e:96:49:f5:bf:31:23:c1:63:
c8:1c:cd:22:6a:e6:d9:35:01:be:0b:84:aa:8a:55:
02:d1:cf:9f:26:0d:d3:8f:18:94:07:7d:51:6b:9d:
27:8a:ac:4c:ca:0a:a9:31:64:4e:d5:06:d4:59:11:
dc:c2:0f:08:aa:43:4a:f8:f0:77:07:89:3d:b3:f0:
17:2d:27:c2:89:16:36:cc:56:26:63:2c:3b:8c:6c:
a3:b1:c3:f0:d0:4a:bc:3d:42:05:94:8a:a5:ee:01:
72:73:1b:ed:53:62:fd:8f:81:88:75:3e:26:59:12:
7a:39:70:bb:7c:22:8c:ae:0c:6b:27:e3:dd:c2:52:
9a:bc:04:e3:31:b5:4e:7e:b5:91:45:f9:4a:80:dd:
3a:7b:07:81:07:54:f7:6c:01:23:4a:db:61:3c:c2:
cd:19:7f:45:4a:11:2d:7f:96:bb:02:da:47:c2:c4:
55:6e:ce:32:55:63:f3:a4:87:a2:6e:b2:a4:9f:6e:
74:39:46:be:5c:3f:15:04:6d:e6:bd:06:2f:3d:83:
4b:fe:e6:46:27:85:b0:fb:ac:2e:6b:03:83:bc:b2:
a4:88:fc:32:37:63:34:51:d3:c0:a0:f6:7d:43:3f:
00:98:92:63:a4:75:4b:4f:2b:e8:31:e1:31:15:95:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1b:84:05:7b:7f:75:73:18:9c:1b:c2:94:49:0b:47:cd:7d:
1e:45:8d:63:32:b3:5a:1b:1d:77:ee:f9:df:67:e3:e9:1d:d9:
f7:f6:86:eb:f1:42:82:f3:e4:d4:49:2c:75:38:66:5e:60:1b:
cc:c7:19:9e:79:c3:a9:fa:d3:f9:e8:8a:3f:b8:4d:61:54:5c:
db:72:7f:c7:fd:df:5e:25:fb:be:86:28:18:09:d4:76:7b:11:
8b:03:6b:30:35:5f:65:00:09:76:8f:55:8b:1b:b6:dc:d3:81:
b6:8b:db:c0:55:4d:56:a3:d4:aa:e5:c8:6b:94:c4:8d:12:93:
61:d3:68:4a:a2:3b:5a:98:4f:13:b2:f2:0b:c8:ce:7e:37:2d:
0e:ae:d6:36:f6:66:5c:fd:be:4e:32:ee:eb:b3:ae:6c:b7:11:
5c:9b:22:c0:1b:88:e9:db:75:58:cf:5a:6c:79:da:75:03:39:
f1:f7:75:66:ea:14:09:d7:3a:1d:21:35:a8:3b:6b:8c:ea:59:
17:15:df:d2:bc:1a:e4:81:b0:1d:51:6d:d9:cf:86:35:27:c9:
1c:fe:26:16:0c:95:db:ba:72:9b:8a:8f:b3:22:94:06:8a:1a:
27:6b:5c:3c:5a:00:db:33:b2:95:eb:12:05:16:d7:d8:cc:9f:
32:04:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:23:03 2024 by rpki-client on console-ams.rpki-client.org