Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
File: UrEszH6hBoww14yVXFa5djvPO00.cer (raw, json)
Hash identifier: BoczY3yH5iC319bSv7Q+Msm6EXQFTUiFv1oWYiyIn1A=
Subject key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42488AAD8B71B1D89ADE166EED285AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 93.95.26.0/24
IP: 2a12:f6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:88:aa:d8:b7:1b:1d:89:ad:e1:66:ee:d2:85:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:e0:a0:a1:f2:6a:1d:d8:59:a6:42:e1:e2:
6c:4e:52:ba:cc:dd:b7:d2:3c:a8:2b:9c:6e:69:bb:
0c:2a:9c:a2:33:85:0d:54:39:18:70:93:f4:56:45:
ca:41:da:93:d0:2b:2e:e0:16:b5:82:dc:54:d1:fc:
68:5b:fc:51:3b:6b:d3:f6:c4:f8:e1:a8:c3:23:27:
6e:35:6b:49:c8:68:4c:08:92:63:a0:a9:64:df:7b:
8f:67:3d:a0:af:84:a2:01:d5:ba:ba:35:8e:93:91:
3f:a6:3e:cc:4e:71:c2:16:0a:cd:b2:47:43:c0:a3:
fe:d1:16:e3:12:83:c6:08:d4:f5:87:c9:9a:6e:b4:
83:5d:5b:81:2b:0a:a9:bd:51:61:03:9b:c1:4b:f2:
e0:57:bc:bf:e9:ea:7b:2e:30:56:4d:f1:a3:b7:1b:
09:03:96:9d:5e:2a:4b:c1:dc:87:5c:52:76:e2:26:
e5:dc:33:23:bb:a3:af:26:3b:99:bc:48:67:e0:cf:
bf:a8:a6:ad:6b:10:d6:85:95:52:20:13:31:85:d6:
df:bc:34:2e:5c:ef:0f:b2:c7:ea:f9:c1:1d:18:14:
bb:40:fc:d2:ef:30:ee:15:8b:f8:f2:f4:40:f5:24:
3b:92:08:29:0f:42:5f:6a:01:85:ce:ec:78:9d:5a:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.26.0/24
IPv6:
2a12:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:72:eb:3a:e2:71:81:d8:30:80:3e:ff:c7:f7:f6:b0:ac:9c:
23:91:51:5b:93:7e:92:bc:6f:b1:08:5e:63:0a:e1:27:40:88:
06:d3:3d:ef:41:26:ba:1a:9b:9a:b4:62:01:72:af:d7:69:5b:
b7:f8:63:ea:bb:15:eb:d9:9d:2c:eb:11:d8:36:d1:76:5c:73:
bf:61:73:7d:11:b2:76:6b:37:18:e7:ef:d4:fb:cb:4f:6c:af:
51:f8:c5:fd:3a:3e:69:93:05:68:eb:9e:70:da:1f:b3:c7:34:
30:db:b4:3c:61:64:ca:6c:86:20:78:dd:de:14:7e:86:5a:12:
e9:a2:1f:1c:f3:61:3b:3a:9d:9b:ab:fe:98:21:0d:08:80:47:
63:e7:60:fb:3d:57:7f:6f:1e:2c:8d:4a:21:d7:b0:d4:05:3a:
72:cf:8d:9d:5b:f1:90:e8:93:97:ef:24:81:d3:c9:53:98:ad:
da:b9:ff:af:f1:ae:8a:0d:df:56:07:90:84:e2:dc:75:3c:cb:
81:f4:64:9c:35:a9:84:32:3c:da:3f:4b:9e:04:b7:3c:1a:6d:
4f:1f:2a:47:20:e4:aa:f6:bc:7c:f2:19:84:55:71:4f:30:31:
f5:1e:0a:f6:ce:5b:62:8e:d1:4c:ea:0b:2f:6f:a6:11:e8:c2:
3c:ae:e4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:18:00 2024 by rpki-client on console-fra.rpki-client.org