Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
File: NeXw-_PWvzoWokvseAyw_W7fMec.cer (raw, json)
Hash identifier: GTHOYRz0bAOGETs2tHaSBEkH65uxwLu7abMTFti5Bh0=
Subject key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50086581E79644078BAD4530BBB6463
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.85.241.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:86:58:1e:79:64:40:78:ba:d4:53:0b:bb:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:06:63:bf:28:b5:0b:67:48:5c:32:72:0b:
32:58:8a:06:1a:1a:02:ab:0c:52:70:1d:4c:4e:2b:
32:33:8f:55:e2:dc:34:f6:6b:f2:7e:06:2f:b3:b9:
09:b2:a1:8c:cd:d4:cb:2f:5e:99:35:39:66:0c:ad:
c8:14:58:b7:36:10:83:78:37:18:b8:5b:8f:77:1d:
07:56:5a:8a:fd:9e:52:31:5f:62:ae:34:8d:ad:30:
53:4f:7f:6d:65:82:23:ba:8d:34:01:4c:4d:be:2b:
b4:47:40:23:8e:1b:0c:48:b0:79:09:b5:a7:12:7c:
80:99:4e:3e:46:fa:0b:97:83:8a:3a:81:7f:69:de:
ae:9d:a4:05:be:11:a8:ff:d1:df:74:21:1e:f8:53:
93:b9:51:5c:30:33:7c:ae:d7:49:43:01:2a:ec:e2:
d9:b4:a8:0e:0a:de:6c:0f:e9:77:ce:a8:68:50:72:
02:59:b8:35:1a:e3:15:6f:3d:03:69:ce:80:c3:d5:
ca:ae:14:0b:21:60:39:0c:cc:49:fd:37:d1:22:f1:
cf:44:ca:ad:23:8e:c1:3e:80:40:39:e7:26:12:09:
2f:40:d7:be:29:91:6c:f3:a2:1a:15:aa:14:d6:bf:
b4:7f:6f:51:ca:d7:ac:94:60:c4:f1:7b:d2:2c:b3:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4a:7b:5e:e5:c3:1c:e2:2c:a8:8b:ce:75:29:bb:27:46:47:
29:3b:af:bc:bc:7c:21:b3:59:b2:e9:a7:b6:e3:44:95:21:d8:
93:b3:1d:69:a2:ca:82:14:9c:7e:52:63:b8:7c:75:ae:bb:cb:
43:84:03:b0:cf:04:79:17:54:fe:89:c1:b2:e9:75:da:70:ad:
c4:ec:d4:c9:47:5f:71:c9:e1:bf:8a:04:c8:4d:8f:38:ee:3b:
45:7f:46:44:1e:be:2b:bb:dd:58:8a:85:bf:91:7a:d1:38:2e:
c1:84:91:db:f4:d6:81:b0:8a:2e:c8:6a:a1:4e:0c:9c:13:58:
26:74:55:f6:aa:5a:92:03:4a:d2:fc:d8:c8:05:b3:1c:11:77:
12:ff:06:2c:35:74:8c:cf:d4:f2:a2:23:24:26:59:5d:95:cf:
72:40:bd:47:37:94:ff:4b:51:5f:e4:e9:05:59:ff:05:ad:79:
16:4d:8b:d7:47:2c:eb:66:5d:97:5a:2c:78:a6:00:1a:f1:a9:
4f:c1:09:90:51:0f:91:75:03:13:3b:35:ee:32:06:74:79:74:
28:e2:12:96:c4:a1:ec:bc:26:ec:ea:a4:aa:73:0a:18:16:46:
d6:ae:66:4c:0d:d6:35:4d:a4:c5:09:9b:c3:44:9f:f5:17:c7:
c1:cf:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:55:34 2024 by rpki-client on console-fra.rpki-client.org