Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer (raw, json)
Hash identifier: 4IWsYptfNvArn8WnUlVwo/IqBBls9I15EL8yl5V5Z7M=
Subject key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4253C70916F7A3245A895BDA4FF323F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.205.32.0/19
IP: 217.19.64.0/19
IP: 2a02:2a70::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3c:70:91:6f:7a:32:45:a8:95:bd:a4:ff:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:fb:29:d5:73:6f:c5:a0:bb:19:e3:48:bd:
28:23:1f:2d:24:91:b6:6c:1e:f9:1d:5c:ee:ad:b0:
3c:7b:ea:72:24:5a:08:dc:dd:f6:66:5a:c5:62:30:
1a:fb:b1:3e:93:4b:e0:2a:b4:46:29:e6:95:54:e8:
b4:33:aa:7b:1d:f3:d3:e6:79:80:fe:95:fe:be:0d:
44:0f:5c:d5:4d:ab:2c:01:7b:91:e0:8c:51:34:cc:
09:84:84:43:71:c9:9e:cb:97:57:72:33:10:e3:8c:
07:ca:cb:0c:68:86:c1:bc:74:2d:c7:ea:5e:bd:fb:
25:82:44:71:04:db:01:50:b3:09:5a:f3:3a:f5:ed:
10:26:e1:53:14:73:72:59:3d:7d:5b:a4:eb:14:cd:
ba:29:24:58:25:d1:88:65:10:75:07:f3:35:9f:ab:
a5:38:64:0f:24:8c:73:9b:b2:29:ad:da:9d:21:7c:
3d:2d:00:b5:0f:f3:54:ca:9f:19:eb:81:f2:46:7d:
f7:c6:02:60:d2:ae:aa:f2:88:fe:52:95:39:55:e2:
a8:86:3c:54:cb:34:bd:40:b4:9a:23:70:d0:5b:39:
9d:bc:65:b7:e9:dd:30:29:41:f3:82:92:0e:0e:32:
1d:e4:bd:5a:de:04:02:29:06:ae:eb:8f:88:32:05:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.32.0/19
217.19.64.0/19
IPv6:
2a02:2a70::/32
Signature Algorithm: sha256WithRSAEncryption
85:f1:9e:2a:a3:db:8f:36:d9:3a:12:0d:78:48:fa:5d:5f:f4:
c3:27:a7:32:86:c0:f2:a9:2b:42:9b:3f:9b:76:00:1b:88:9a:
38:a7:e7:aa:82:cd:67:84:f1:76:8c:4f:e5:66:7a:51:d5:bd:
5e:76:40:01:6d:c9:eb:15:1f:b3:16:a7:ec:7d:ad:fb:5b:35:
ff:23:d4:63:41:9e:5f:8d:93:a0:b2:d8:e7:d2:72:6e:07:e4:
ee:66:91:30:30:8e:db:3e:d7:43:ff:a5:95:9d:c2:70:87:06:
e9:44:f0:4e:b7:de:c8:3d:32:21:de:da:02:9d:6f:eb:b7:fa:
b6:c4:5a:c4:66:fa:ac:e4:97:7c:59:74:c4:53:bc:ac:4b:95:
ab:bd:81:7f:8b:4c:b7:01:a6:2f:84:04:16:d0:7a:8a:da:b1:
d5:93:5e:91:b8:44:eb:4e:cf:1e:d5:7c:dd:51:f5:fb:f3:ad:
9b:0a:de:a0:d7:3d:55:15:b4:e0:2d:90:52:be:0e:5e:a5:37:
75:9a:91:ba:d2:28:8f:99:bd:e4:30:c8:93:d1:c7:67:d4:dc:
31:7d:d7:9f:e7:b9:9c:15:a9:53:22:ec:5d:5c:0d:ab:aa:59:
33:ab:ec:41:31:d3:b2:bb:c9:ca:31:65:94:ba:da:bf:77:e9:
e6:67:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:00:27 2024 by rpki-client on console-fra.rpki-client.org