Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
File: PteWKLWmD_FIn0c74S1s797hNeY.cer (raw, json)
Hash identifier: 0H2JY0wK8ciJcCXV8o8D5uBl+3t8mnrB8K1lxyh8EWY=
Subject key identifier: 3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4255A6526EFD544D15C4B34C97911F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.225.76.0/22
IP: 2a0c:3200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5a:65:26:ef:d5:44:d1:5c:4b:34:c9:79:11:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:95:9a:5f:52:b3:f2:15:c1:7b:95:18:05:
bc:16:f8:fd:47:39:33:04:ac:09:df:cb:39:78:45:
4b:80:cb:cf:89:40:2f:44:e4:7a:25:64:5e:88:fc:
2a:84:d5:a4:55:1b:22:3c:3f:63:97:61:98:59:69:
9c:ea:d2:7c:ca:d1:e6:c2:af:4c:30:0c:a2:97:e0:
72:76:99:9b:c8:42:68:e0:44:cc:d7:93:98:ca:64:
ab:1f:6e:e7:af:18:38:e8:fc:d4:2b:cb:d7:84:79:
9a:34:98:04:b4:92:be:b9:67:d3:91:f9:bf:e0:76:
49:fe:bc:18:b3:08:61:1d:b8:d4:32:7c:bd:a4:1c:
e0:5d:8c:05:0e:bd:80:8f:6c:29:5e:7c:77:97:05:
74:d1:6c:9a:00:be:d0:7c:d6:43:58:de:50:97:fc:
bc:96:01:20:ff:c3:e9:73:a6:3c:1f:6a:77:45:e2:
e8:f3:0e:c5:42:16:fb:1a:46:93:66:2e:a7:a6:10:
d9:4d:bc:be:f3:a3:e7:38:b4:71:68:db:c9:9a:74:
16:94:57:79:a1:f5:cb:b1:c7:68:24:06:bc:e8:b0:
f9:2c:c3:20:dd:9c:b7:1d:81:64:ab:8a:69:c9:9a:
92:0b:55:d4:8f:3f:74:ed:bf:26:fc:08:82:d3:dd:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.76.0/22
IPv6:
2a0c:3200::/29
Signature Algorithm: sha256WithRSAEncryption
63:2b:0c:c2:5d:b5:38:df:fb:62:a0:27:be:1b:f1:f1:75:2b:
8f:7a:f2:46:92:9f:78:9d:93:23:b8:47:0b:a3:c5:7d:b4:fd:
ea:d8:10:4f:0e:48:c6:8f:82:db:5d:d6:c7:05:ab:72:6c:48:
7c:b6:8f:d6:e2:2c:c4:5e:bc:44:87:e3:29:37:6d:0b:4a:d1:
c1:18:21:f2:1b:7f:55:db:cc:7e:a3:60:56:22:c6:e2:40:57:
fc:85:ec:45:4d:cd:52:fa:d3:b3:21:dd:9d:72:31:c3:e0:8a:
af:6e:b6:99:1b:65:f5:62:98:c4:b9:46:e7:bf:0e:2e:fe:93:
a8:be:e2:d5:e0:32:c9:e4:f8:79:1e:28:05:5a:bf:b4:44:88:
88:78:2c:5f:96:7c:e5:e2:51:53:d0:cf:94:ef:d0:b3:18:31:
4d:02:e6:b5:49:7c:c8:c1:cd:2d:1f:6e:41:c9:0d:9a:0d:29:
5c:23:17:71:f1:e1:c8:fb:a2:52:28:13:67:1d:e9:f3:a5:3c:
2a:41:12:d1:d6:2b:e4:1a:17:6b:22:95:94:cc:a0:e3:fa:1c:
50:ef:cc:26:ad:d0:b1:72:fd:a1:80:56:63:6c:1e:46:fb:f1:
88:fb:d5:9d:e1:02:a9:d0:17:a5:67:48:e3:c0:0c:31:b3:c4:
92:ab:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:15:32 2024 by rpki-client on console-fra.rpki-client.org