Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.cer (raw, json)
Hash identifier: 8h78qiRK/o9XvVg4Iv3tsFjCArfIIlk+sLEv9rJpj8M=
Subject key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425556699A89A56E9B4049D6845EC79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.96.72.0/22
IP: 2a00:4b20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:55:66:99:a8:9a:56:e9:b4:04:9d:68:45:ec:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3797e039f025a25aa6e992391d924260699ba67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:3d:80:dd:1a:43:a1:fd:0f:43:d8:a0:4e:
5b:19:f5:be:6e:d6:a9:91:73:31:77:fd:85:07:c5:
b5:25:20:af:51:d2:a0:db:17:3e:de:3a:cf:6f:1e:
85:c8:56:ef:b4:04:b4:2c:85:5f:f1:c1:a1:e2:a5:
33:15:53:1c:b6:24:71:60:37:2c:63:0b:cd:33:50:
22:27:d2:86:38:3b:38:32:33:18:4d:95:53:71:34:
54:02:0a:ba:00:be:8d:5b:7f:d1:59:e2:db:0c:b5:
69:38:25:f8:b9:71:c8:f2:bb:4a:bb:8d:09:05:bf:
0f:12:9a:c6:52:44:b4:b4:25:93:49:e1:f1:8a:50:
f0:89:27:63:19:38:0d:14:f8:9d:52:67:dc:c3:7a:
d9:ee:c9:93:88:31:4a:0c:80:61:d7:af:80:0b:54:
3c:e9:49:54:62:7f:61:c6:72:08:70:91:1a:7f:94:
8e:77:51:01:71:80:7d:b8:3b:78:3b:ad:3e:b8:f0:
29:03:db:68:7d:2b:3c:d4:22:e9:e0:e4:3d:b6:a2:
8b:5f:ca:52:9e:d1:a0:50:4e:ef:fe:70:91:f1:28:
9a:71:93:56:57:3d:5a:71:cf:24:5c:60:38:26:9c:
1d:e3:7d:15:f7:db:f9:bf:ce:32:0c:8a:bf:e8:18:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.72.0/22
IPv6:
2a00:4b20::/32
Signature Algorithm: sha256WithRSAEncryption
3d:33:8c:47:91:76:58:61:45:44:f6:c9:1f:2a:27:b8:40:6b:
23:d5:37:a6:19:fb:10:f3:eb:36:46:8f:1a:17:c4:51:42:0f:
1b:b6:2a:bf:d2:38:60:ab:d8:a2:c0:dd:87:1b:e3:00:cd:ef:
da:25:86:a1:8f:a5:93:7b:72:96:43:da:da:32:99:e6:17:05:
77:75:45:3d:90:b4:c6:4f:77:e3:38:41:8b:d3:69:b2:06:ac:
12:18:ea:91:fe:5d:87:4b:72:f6:57:8a:fb:be:77:e4:04:95:
a4:57:b9:c8:60:72:9e:79:5b:07:1e:49:8c:a0:c8:9b:80:39:
3f:c9:23:f7:30:de:d0:84:79:f6:c2:77:d7:19:a1:9f:da:c5:
77:d7:64:0b:f7:de:39:fd:2b:0c:35:7f:f8:25:a5:ec:85:26:
cf:db:2a:42:81:1d:c9:ce:86:bd:b1:02:79:b4:eb:d7:46:80:
d5:ab:c3:43:e3:67:93:28:03:83:a0:1e:fe:84:01:cc:a1:1b:
f9:72:94:89:09:bd:e5:64:10:4a:f7:5a:47:65:d7:89:19:49:
94:f8:43:22:da:e3:d0:ed:dc:e4:da:81:9c:40:93:ab:64:1a:
2d:88:34:da:83:26:cb:1d:39:ab:5e:bd:9a:61:33:17:fd:38:
ff:44:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:49:08 2024 by rpki-client on console-ams.rpki-client.org