Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
File: U4DNitL4ThTptbZCOJN7bUIH4iE.cer (raw, json)
Hash identifier: s/1vq0mEHIG4HN3s8tIqL5yqIaYpBZyPhIWIGppOhmM=
Subject key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99E4A7C2FBB1CBB6E624A560D79872
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.12.24.0/22
IP: 2a03:6ac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:e4:a7:c2:fb:b1:cb:b6:e6:24:a5:60:d7:98:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:21:ce:3c:af:0c:55:b6:ee:ba:d3:4b:41:
6b:b1:5f:54:49:6c:24:6d:51:32:f7:4f:ec:4a:e9:
14:6a:72:ac:6e:9e:83:30:48:b0:21:81:81:24:de:
c8:1e:c8:67:e1:5d:8d:fc:7a:bc:e5:19:57:0e:21:
72:3c:24:c0:71:5d:55:7f:fa:97:08:6e:06:ed:bc:
33:2d:ee:67:81:5a:66:f1:91:ca:e6:b6:d9:eb:62:
a8:e3:d6:f2:1d:1d:0d:1a:3e:5a:8a:0e:dc:1d:ed:
2f:7d:f6:eb:66:ed:33:54:1c:4e:88:1d:7d:9c:ad:
d5:d6:a7:c7:df:93:44:1a:02:0f:5d:45:81:5d:be:
f7:7d:68:2c:1e:f1:73:d0:4c:c6:67:ec:0b:4f:85:
24:d8:94:24:14:8a:72:f2:43:c3:d7:fc:97:57:5d:
80:ac:76:36:13:59:82:39:41:89:3d:44:26:36:47:
6a:8b:cb:af:1a:03:d8:0f:31:23:07:ec:06:4f:d3:
ad:0d:f6:fd:17:d0:be:50:26:b8:fb:4a:8b:88:1b:
d8:94:28:b8:97:93:e0:76:6f:e0:f8:78:39:f1:5f:
53:66:1c:93:29:f9:b4:38:84:ea:8a:62:bb:4d:30:
95:c1:c0:be:ba:e3:15:b1:00:df:ff:09:77:63:a3:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.24.0/22
IPv6:
2a03:6ac0::/32
Signature Algorithm: sha256WithRSAEncryption
13:49:23:c8:6e:c2:fb:03:ca:ec:a6:96:1b:4d:8f:cf:7a:c9:
1e:c2:b4:33:b0:c9:5b:39:14:48:96:81:4b:1f:51:2d:d0:71:
60:7a:c4:60:6a:7e:f9:d2:a5:9f:2c:98:4a:0f:34:fa:95:b2:
19:fc:60:d7:f6:28:89:a9:98:ff:84:36:36:1c:93:14:bc:32:
19:03:92:52:a2:02:c1:12:57:5b:be:23:c3:70:af:5f:4d:39:
11:53:e0:28:f1:b8:66:b0:0c:cd:60:19:cf:e8:45:d6:4d:f8:
d0:85:8d:23:4d:98:fb:52:f3:5a:42:3c:d1:4e:45:f5:2d:f5:
57:da:74:07:4f:af:b1:ee:72:4a:f9:55:6b:75:5c:49:f7:c9:
b5:b6:d2:8a:9e:27:5f:22:53:8d:26:0e:55:b5:f3:b7:36:b7:
1a:ee:80:61:e9:aa:44:29:e8:0c:74:d3:dd:fd:5a:3d:ce:d3:
8f:a9:47:e5:f7:c1:2c:0c:88:f1:4d:a4:cf:29:f5:60:bc:4b:
33:aa:88:74:51:e3:c2:ea:c9:87:19:d4:de:df:c5:0c:bd:63:
ba:c8:66:8a:6f:f6:43:47:60:8c:56:60:cb:e1:82:96:2e:f7:
4a:96:17:c6:94:b0:23:15:84:86:16:88:8c:d6:38:28:d1:f2:
56:36:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:19:20 2024 by rpki-client on console-fra.rpki-client.org