Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.cer (raw, json)
Hash identifier: JasaX5fMS7S6IJ8zGfsST70EmZFvm4B5LwXdkd+1lx0=
Subject key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42461574E620D10987091AE6031BBE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.105.0.0/22
IP: 2a0d:a380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:61:57:4e:62:0d:10:98:70:91:ae:60:31:bb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:61:55:b5:0f:b8:e3:15:e0:98:2f:48:b5:
bb:6a:2a:ff:76:ee:14:f3:6f:86:29:17:00:1a:0d:
f3:8d:c0:3f:57:fd:30:ec:01:35:d8:36:b8:a4:ea:
fb:00:ca:b1:2d:bf:ab:40:e7:06:49:3b:e3:4d:30:
61:f0:15:7c:92:50:74:48:bf:b8:d2:93:05:bd:4f:
81:28:5e:1f:70:9a:ea:73:b2:e9:81:6b:3c:89:0e:
ef:37:94:be:34:6f:25:31:4e:f9:ff:c5:00:8f:0b:
11:c7:9a:31:9f:22:b5:d6:22:22:60:33:f4:d4:4e:
a7:f7:73:f1:4b:18:e4:ee:9f:50:09:c7:74:b6:5d:
4d:d7:08:3e:99:94:26:92:62:8a:22:74:b3:89:3b:
7f:13:b6:dc:5b:e8:fd:64:80:23:88:ca:63:9e:67:
57:32:4e:0c:7a:eb:15:e3:0e:7a:a0:d0:cd:7b:2d:
4d:4b:dd:66:b5:9e:0f:22:04:ae:a7:bc:26:86:40:
9e:e1:ca:51:71:6b:a8:61:3f:5b:13:8f:9f:d1:aa:
93:91:62:8a:b6:f5:9a:87:67:89:97:a6:5c:ca:a4:
f8:80:73:e0:76:26:93:ed:1f:4c:2a:db:d5:c2:c5:
38:35:69:03:f2:0d:98:c2:20:6c:9e:ca:93:4d:47:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.0.0/22
IPv6:
2a0d:a380::/29
Signature Algorithm: sha256WithRSAEncryption
0a:46:6b:10:19:21:49:17:c0:51:9a:4d:bf:74:ab:c4:06:c2:
df:af:2d:73:3d:ef:11:63:1d:5f:c9:4a:a8:69:9a:5b:a3:5d:
44:b1:18:14:61:bf:11:7e:4b:5b:32:a2:99:e2:dc:c9:b8:fd:
ee:eb:3c:9e:02:1b:fb:a9:fe:f4:42:6a:81:15:05:88:aa:99:
b1:09:6d:e2:08:01:9c:ca:7d:ba:43:b0:53:1a:3b:b3:d2:41:
bf:34:af:b8:54:17:0f:88:bc:30:9e:4f:9f:d3:c7:92:01:d3:
79:4d:45:48:e8:ef:0f:eb:b6:ee:7c:ad:c2:15:96:03:14:a1:
ea:b4:ff:9e:62:d2:fb:a2:30:bc:9c:14:fb:9f:bb:6d:bf:ce:
26:e3:8b:fb:d9:e1:65:ce:22:91:c3:5d:ef:bb:5b:98:60:f2:
a9:c4:b6:fb:f9:f4:1f:9c:23:fe:d7:fc:5d:86:cc:42:c5:40:
9c:a0:be:a3:12:e8:e3:30:5d:12:8a:73:35:a9:9e:cc:90:0f:
2e:03:7c:9d:9d:93:d4:1e:4b:29:08:1e:ff:b8:bf:d2:ab:6c:
2f:a6:28:9d:e8:a9:4e:eb:86:39:95:14:53:90:c1:bc:82:c2:
a3:05:9d:f2:d2:b8:a9:d8:8f:eb:9c:e1:dd:3a:6c:ba:86:23:
a2:82:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:20:08 2024 by rpki-client on console-fra.rpki-client.org