Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
File: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer (raw, json)
Hash identifier: Ksw6D8FL6il9TBuiUhSEEY1DPnxCWw+8BNWmmIcEwuY=
Subject key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019252E9FB5E85465FBBD8BFD42EC05145C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Oct 2024 15:05:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a09:6900::/29
IP: 2a09:8b80::/29
IP: 2a0a:bbc0::/29
IP: 2a0d:b9c0::/29
IP: 2a0d:f640::/29
IP: 2a0e:6740::/29
IP: 2a0e:8840::/29
IP: 2a0e:9180::/29
IP: 2a0e:c440::/29
IP: 2a0f:c00::/29
IP: 2a0f:72c0::/29
IP: 2a12:1240::/29
IP: 2a12:1a40::/29
IP: 2a12:2e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:e9:fb:5e:85:46:5f:bb:d8:bf:d4:2e:c0:51:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 15:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:84:1b:8c:4e:4e:00:d6:17:85:21:00:dd:
8c:c0:7c:53:d3:4a:4a:9d:d8:ad:c6:01:1c:e1:10:
a9:69:32:75:79:d0:b6:04:ac:92:17:1d:8e:67:38:
db:32:46:a0:af:20:87:3e:15:56:6b:5f:ec:cc:74:
15:15:be:1d:00:47:7c:09:3b:3d:09:be:68:73:eb:
dc:18:8d:d4:df:62:ee:de:bf:67:98:db:75:36:15:
ae:3d:8e:b3:3c:f1:de:00:c6:7e:e5:94:e3:f6:a1:
e7:37:09:a8:27:b4:c9:bd:b8:df:af:8b:28:57:dc:
22:8c:c5:36:94:fd:40:dc:00:b1:1c:97:56:5d:bf:
73:98:76:f0:51:e2:c9:95:16:51:95:7d:29:0e:02:
c2:3b:12:a5:bc:a8:7f:a2:66:a9:16:dc:e7:26:cf:
75:72:92:b7:93:7b:1e:de:42:f6:a1:09:28:75:01:
50:9b:ef:b3:36:6e:30:57:f4:f9:d1:bf:e9:b5:8d:
00:cc:0d:ea:6a:9a:8e:30:76:d3:69:3b:a1:34:58:
3e:d3:ee:05:21:db:d6:e2:56:cc:4b:7b:e7:9a:ed:
7f:f5:a1:eb:29:d9:f8:17:ad:9f:f7:39:d4:59:fc:
b8:8e:81:24:0f:72:d5:b4:29:e6:13:cb:97:53:ef:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6900::/29
2a09:8b80::/29
2a0a:bbc0::/29
2a0d:b9c0::/29
2a0d:f640::/29
2a0e:6740::/29
2a0e:8840::/29
2a0e:9180::/29
2a0e:c440::/29
2a0f:c00::/29
2a0f:72c0::/29
2a12:1240::/29
2a12:1a40::/29
2a12:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
52:8a:93:7e:17:13:dc:1b:78:cf:a5:77:c8:b0:94:8a:ec:c3:
86:f8:49:4a:bf:c9:ef:9b:e8:72:cf:85:b7:4a:f5:a0:14:a4:
98:4e:0d:36:e1:53:64:ff:92:e7:b5:6a:ac:7b:82:e9:1a:03:
ad:ce:16:29:a9:2c:81:98:69:89:41:ef:cb:15:22:3c:64:2e:
29:cc:32:75:78:0c:63:03:e0:cb:23:e1:27:55:ed:7f:ff:28:
9a:2e:38:a1:16:5e:a3:21:51:ba:65:63:e9:db:42:22:52:99:
87:6a:ed:80:87:d6:3c:d6:dd:e1:c1:76:72:0d:6b:bb:d5:f9:
86:c7:19:01:be:4f:a3:c7:3f:97:a5:0d:65:3f:e9:9a:bb:af:
43:c1:55:76:d5:99:59:4f:dd:f4:33:29:ed:d4:3e:15:55:e0:
ea:e0:9f:fe:a9:3d:93:ef:64:cc:8f:75:d3:0c:f6:d2:0a:81:
80:ec:75:5c:55:9e:7d:d5:03:75:d6:7e:a5:37:65:8b:d7:db:
ff:14:39:de:8f:34:44:da:3d:d6:4e:2e:0b:4e:20:c7:5f:17:
a0:7b:19:0b:65:90:f5:78:31:fe:7a:2e:06:a7:98:05:34:48:
7b:51:64:7f:f4:0f:b0:72:89:d8:73:f8:6a:7d:4b:b6:16:f6:
1f:29:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:51 2024 by rpki-client on console-fra.rpki-client.org