Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
File: U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer (raw, json)
Hash identifier: 39tbznSnDNXh5xBV+GCXDpvZ35iouljUFZ8Ct1w8q7o=
Subject key identifier: 53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CF0D1D7662C8CC16FB74896C19AD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.84.148.0/22
IP: 2a0e:9b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f0:d1:d7:66:2c:8c:c1:6f:b7:48:96:c1:9a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:13:26:22:78:17:ac:12:cb:53:ca:fc:51:
f3:f2:f1:60:d4:e5:d8:37:6e:fa:f4:67:0c:b8:6f:
11:f2:37:50:75:64:bf:ac:ed:38:26:3e:0f:8a:0a:
2f:db:9f:ce:9d:e9:b1:de:f5:62:1d:bb:88:bd:5f:
7f:ec:9d:35:b8:cc:1f:bb:4e:a4:2d:7b:c9:fc:d3:
92:79:9f:31:54:03:9b:16:a1:65:9d:33:fe:7a:a0:
af:2d:66:1d:89:66:a0:3c:2b:e7:6c:55:00:c1:36:
b5:27:3a:da:b6:53:ec:86:dd:a6:b5:32:56:1d:e9:
57:1c:c5:be:43:65:54:53:b5:3b:34:59:56:06:93:
38:d3:9d:f1:28:3b:f1:d5:c5:5e:92:9d:bd:f4:93:
ea:b1:12:a0:20:94:0b:c2:f4:3f:f9:68:aa:52:cc:
ed:0a:52:95:17:b2:f3:83:91:6d:84:2c:cb:a6:a3:
d5:5e:51:44:e3:8b:a4:86:2e:fc:42:64:4f:7c:0a:
5e:a3:08:f6:5d:35:d8:cd:ac:d7:56:6c:6c:9f:e1:
4b:8c:78:67:88:fb:11:c0:45:40:8f:fc:12:72:77:
1c:f3:f4:61:c5:41:a1:03:25:57:48:20:c1:70:88:
91:c6:b4:af:b4:a7:c0:86:8d:18:c8:0f:22:1d:c9:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.148.0/22
IPv6:
2a0e:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
00:e7:3b:20:8f:b3:e5:9f:87:41:58:c1:cb:5b:29:53:b4:db:
de:25:d1:c4:fd:ae:37:95:ba:c3:14:c7:a3:84:3a:95:20:b8:
8e:2e:58:10:8c:e3:4a:94:ef:41:d9:8a:8d:14:57:88:c2:54:
28:b8:46:3b:3f:81:a3:8a:7d:3c:c1:da:28:02:e4:e4:2d:7b:
9c:f4:d0:db:00:8e:44:f1:54:c1:c7:a7:3d:21:77:f9:b8:71:
a4:b4:f5:d6:b1:c2:a9:aa:50:83:d2:1e:0e:31:63:71:d9:78:
7a:aa:68:52:a5:1a:41:35:50:c8:a6:c7:28:4a:dd:09:e1:42:
8b:1f:8b:5d:0b:78:38:5b:6f:99:8f:ec:f9:4d:b2:90:75:9c:
f4:82:a6:90:ad:f0:53:3f:6d:5b:44:2b:ab:1d:54:04:7a:0a:
53:54:b2:6e:0e:c7:4f:ab:0e:8e:60:0a:68:8a:10:ab:b1:cc:
5f:1d:6c:74:20:a6:9c:42:6f:73:8e:b4:50:3b:3a:14:85:67:
84:b0:43:a7:60:4a:95:06:95:09:c2:f5:9d:c2:9e:33:46:8a:
88:62:65:d2:70:7b:fc:11:91:96:51:7e:59:8a:d3:9e:9f:c0:
83:4f:f4:ec:6a:c2:5e:3a:ae:16:47:6b:c5:47:f0:f0:14:51:
27:8d:86:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:20 2024 by rpki-client on console-fra.rpki-client.org