Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.cer (raw, json)
Hash identifier: r+aSfe3v0SIWJxHPBmRTcv4nthsH1xUiFogf2tr4Lgs=
Subject key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DD12912E2929BFDBE10F51150B9FF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.29.192.0/22
IP: 2a04:4700::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:12:91:2e:29:29:bf:db:e1:0f:51:15:0b:9f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a8095927ee57ccee256aa439f163686b58c570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:2f:b2:62:ab:41:7b:ea:cb:84:27:ab:40:
86:00:1a:f3:bc:6e:ad:b1:4c:70:f5:7f:f4:68:19:
59:e1:ff:54:cb:f4:1c:89:08:95:2e:5a:03:8f:27:
49:67:f2:74:44:e1:db:78:45:0f:9b:04:89:6d:84:
62:4e:99:fe:f4:68:41:e9:a7:18:fe:7a:fa:e7:57:
48:5a:0a:45:f3:11:be:a8:24:6b:bc:28:4b:8d:2b:
9a:92:96:48:4b:28:dd:69:8e:9a:c0:a2:a0:66:ea:
d0:e9:89:6e:c2:ca:68:e6:42:1e:07:27:9f:85:fc:
10:d7:da:1d:27:cb:26:18:b9:4b:d9:dd:8d:32:2b:
f0:4e:f3:57:99:73:dd:5a:0c:4c:92:5e:89:2f:b6:
e9:32:a0:be:0f:57:9a:e3:2a:03:93:a8:45:c7:79:
19:88:4d:2c:03:32:cc:aa:ea:bd:ad:8e:c7:dd:1c:
d5:9a:f2:e5:2a:cc:35:18:a1:d3:03:35:3c:d1:99:
95:77:c0:41:38:4a:d5:83:f5:4e:c5:c1:88:2b:57:
09:82:86:99:94:bc:20:45:5f:8b:1e:86:90:71:86:
12:a0:48:f7:f4:7b:9d:6a:ae:cc:84:0a:18:15:a9:
ab:bd:ee:cd:88:54:c1:66:6e:e3:31:9e:6b:52:10:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
IPv6:
2a04:4700::/30
Signature Algorithm: sha256WithRSAEncryption
15:f2:3c:b5:e1:9c:b6:84:2d:eb:40:1a:98:e9:ef:05:b6:b7:
69:5b:cb:55:10:67:90:c8:77:fd:2e:d8:82:46:9a:96:43:ff:
61:10:18:61:29:7a:09:06:64:ff:22:71:29:35:80:e2:10:5c:
0e:72:05:7d:be:31:f0:99:11:d4:30:37:c0:f9:a5:a9:b1:c3:
90:c5:a7:67:3c:bd:a9:c6:de:42:d6:2b:ce:17:5f:72:67:d5:
f0:e5:0d:fa:52:b0:50:2c:94:b0:27:88:25:1a:3f:ea:a4:38:
c2:92:3b:a3:a5:a3:60:3e:88:d3:57:a6:e2:0e:fa:7a:ea:1d:
05:43:fe:13:22:af:ad:77:d9:f9:c6:82:74:c4:f7:55:3e:01:
ea:b7:7e:a3:bc:9d:0e:10:e3:80:42:65:63:e7:96:6c:03:be:
d6:61:2a:d1:1c:fd:a7:57:68:b2:dc:ed:5e:a2:9e:9a:31:03:
42:90:21:24:ac:32:8e:24:cd:1a:f9:ea:af:77:0c:4f:1a:3c:
a6:d4:4f:2b:c8:2f:5b:da:68:ff:58:3f:e1:e1:48:db:7a:97:
2c:85:f5:23:29:76:60:28:e1:d7:aa:5e:23:6d:61:eb:84:c3:
a8:af:fd:24:e1:13:50:fe:07:e0:77:24:d0:f5:49:59:68:5f:
af:c9:b3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:41 2024 by rpki-client on console-ams.rpki-client.org