Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.cer (raw, json)
Hash identifier: oAuzCmXBb4ddhUGOlPbGWNW3vGt21IcbWxmQIaKhNqk=
Subject key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF5CAD7108247C211D251073F2C3EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.61.64.0/18
IP: 62.176.32.0/19
IP: 2a02:2ac8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:5c:ad:71:08:24:7c:21:1d:25:10:73:f2:c3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:5f:3e:82:8d:8b:ce:1a:f5:92:1c:92:a7:
c5:53:df:14:99:36:64:7c:54:7b:40:6f:f3:7a:3e:
d3:03:8d:d4:b6:7f:85:62:d2:2c:30:2f:fb:86:82:
21:3a:8c:39:f4:2e:a9:76:b0:4c:15:3d:7e:d5:2c:
d4:6a:b0:6e:5d:68:13:80:e1:93:5a:e8:25:0a:e9:
ab:e6:97:0a:7d:ed:0b:52:a7:b6:d7:73:4e:bb:9b:
83:c9:b4:92:af:fe:a4:47:df:e9:1e:70:29:c5:d8:
89:b5:03:42:82:7e:c0:1e:45:ff:37:a9:e6:c9:e7:
4e:03:36:69:f2:7c:f2:75:49:e4:7c:de:8d:42:fe:
c6:95:16:6b:17:64:83:db:31:48:48:61:db:4b:a8:
59:b3:48:fc:72:2b:ed:0a:d9:8d:99:8d:7d:e9:39:
38:3a:b4:1c:c8:55:5f:f3:1b:0e:76:29:27:4c:16:
62:e4:05:54:44:69:ba:ac:6d:ae:fd:7f:d2:4f:f3:
71:15:18:9a:2e:8a:31:45:a1:d5:39:21:79:98:b8:
43:fc:76:8e:52:a6:c7:be:10:fb:40:7f:ba:fe:71:
0a:0a:33:cc:85:1f:0b:be:32:ec:0d:a5:20:d9:35:
43:3b:7d:c5:b5:3e:4e:f3:4c:60:0c:72:cd:8c:c5:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.61.64.0/18
62.176.32.0/19
IPv6:
2a02:2ac8::/32
Signature Algorithm: sha256WithRSAEncryption
23:97:a4:fa:1f:d4:93:9e:b2:e6:6f:ba:c7:41:21:29:e6:bc:
c3:b9:2e:ee:4b:b5:7f:f2:e3:9d:d6:1c:18:0c:66:1e:7d:1c:
dc:68:02:06:5d:4f:0f:c4:3f:36:b6:f9:59:c0:0e:f0:0f:cc:
8a:93:0d:11:28:4a:23:de:bf:26:32:61:7f:fc:95:7d:55:c8:
38:b8:12:08:06:45:1e:8b:25:47:ef:4c:b3:1a:24:31:b8:b9:
8c:ab:8b:58:86:34:1f:5e:c9:a5:db:9d:a6:0b:cc:85:b6:9b:
f0:19:f0:b0:42:18:1c:47:9c:88:cd:8b:48:ea:c0:a0:87:7f:
d8:6d:d3:ca:0a:86:6b:bb:5a:04:63:51:e7:67:a0:6a:ff:7c:
da:3a:9e:94:47:a0:74:de:7a:99:c0:43:15:80:9c:19:ac:4f:
06:30:81:d1:12:96:bc:cb:37:08:85:72:56:c8:88:12:af:ae:
74:64:ce:ed:a3:47:57:08:6d:ff:32:ac:db:b0:a9:1c:1e:76:
7c:20:3d:01:27:0e:d0:39:14:ff:71:38:d7:fa:cc:d5:b4:08:
6c:63:43:40:ba:68:c6:14:1f:ee:85:9b:6e:c2:b9:6a:52:d7:
81:01:38:6f:11:01:cd:8a:f8:1d:1e:bb:7d:40:68:14:63:88:
89:ee:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:12:53 2024 by rpki-client on console-fra.rpki-client.org