Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
File: U0Yz8Z9h1lRuur996ft6qYftW_M.cer (raw, json)
Hash identifier: wl/LNisAHT7I5JSxEnddaV8Gjb3t8TBQuCDrDqv4BRM=
Subject key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D6BBB363C9C1F36150A1E6E5C2356
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.252.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6b:bb:36:3c:9c:1f:36:15:0a:1e:6e:5c:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:86:77:86:55:39:27:14:1b:1a:24:35:52:
e0:7c:6f:8d:52:0f:c8:91:53:5b:13:be:4b:d7:53:
e2:ef:e2:c0:81:e2:57:e6:41:04:c2:fb:82:aa:50:
3e:3a:28:74:00:5d:6a:e9:bc:e6:e1:4e:87:17:69:
0d:0c:c3:5e:ff:c6:b1:3e:86:e6:ef:3a:06:29:39:
5a:14:8a:73:1f:0b:9d:73:7a:bc:55:72:a6:94:4c:
2d:9b:a3:ff:aa:04:ac:13:98:14:10:73:a9:b6:62:
fe:98:67:c7:62:61:79:2f:a9:76:8f:50:82:45:bd:
9b:3d:3c:37:f2:6c:de:7f:ba:a0:ef:2e:04:b3:e0:
08:e1:ad:31:11:eb:76:72:33:a4:76:0b:c6:bf:91:
ea:33:db:f7:1d:70:7d:ba:0a:23:c5:b0:7b:5a:b8:
81:95:e5:71:a0:8f:8d:0a:60:12:9a:d8:ff:23:e3:
2f:1e:25:6d:f5:0d:0e:1d:67:97:a7:49:bd:80:03:
33:fa:f8:fe:62:c9:22:84:7e:93:5d:f2:2f:6f:65:
2d:f4:7d:3d:df:74:46:e5:80:66:12:3c:0d:f3:ca:
83:67:e7:bd:41:27:57:a1:7b:26:25:b5:87:d5:42:
9d:b3:6f:10:50:1c:94:58:af:a0:bd:e0:78:f4:41:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:84:4f:ab:ec:62:0e:e5:8e:1f:09:8b:fb:74:cd:9c:52:80:
60:d6:36:65:ce:22:a2:22:51:90:f2:4b:35:19:b0:83:d6:40:
28:9c:62:8e:9e:32:e3:10:24:7c:12:76:be:f1:05:32:ee:58:
b6:f3:f4:33:44:ab:fc:5b:15:04:17:77:81:a5:d4:74:b2:3f:
a2:86:59:88:ed:f0:de:d5:03:b7:ed:cb:e0:01:d1:b1:fd:2f:
ed:76:ac:4d:c8:4f:df:d0:82:74:3e:57:17:84:6e:9c:e2:c8:
26:75:ce:87:ce:2b:b4:46:b1:e8:6b:c0:44:ed:09:19:08:e1:
7b:d6:96:e6:0d:fd:e5:9a:48:78:7d:ee:ef:ad:16:9e:e6:2a:
78:f1:72:c3:fa:e5:ef:e1:48:33:e4:03:c3:27:91:97:b6:1f:
17:e5:c8:48:fe:f1:72:26:29:60:6c:06:04:65:9a:84:3b:f6:
16:84:b6:ec:5f:24:81:2f:e1:41:7e:19:41:b9:7f:f6:a3:7b:
80:cb:d8:a2:ae:ad:a9:ad:d4:97:b8:41:08:20:42:ac:0a:a6:
ba:c2:b0:36:e2:29:88:f8:f0:21:ec:ad:d3:e4:3b:99:b8:87:
29:c2:61:0e:16:d3:ae:e1:9c:0d:02:20:3a:4c:7e:29:fa:d9:
14:1e:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:01:21 2024 by rpki-client on console-fra.rpki-client.org