Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
File: ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer (raw, json)
Hash identifier: hY+H5/8hjgusFmxUEy/zw0KqQdMoFdiUaSDIA4C6Eig=
Subject key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D7822F0A7E4086E63C41BBEAAC06C595F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Feb 2024 07:19:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.68.157.0/24
IP: 2a12:c580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:22:f0:a7:e4:08:6e:63:c4:1b:be:aa:c0:6c:59:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 07:19:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:ed:64:df:ef:77:72:bc:38:68:1f:91:e6:
24:2b:09:eb:dd:d2:37:1b:dd:4c:0c:17:d7:05:99:
98:03:50:1b:8d:75:30:47:81:5a:32:c5:45:30:ae:
6c:47:58:f0:10:7d:8d:44:aa:d7:28:c5:d8:f3:a5:
7b:ad:c4:87:9b:3e:06:26:39:e3:11:10:81:b1:29:
f8:b8:e0:04:54:aa:54:49:1e:10:bb:d4:bb:77:d7:
62:2d:22:52:08:fa:00:a1:b9:34:4e:41:04:09:52:
bf:fd:ef:cd:27:97:4c:c6:b0:16:d0:43:6a:da:93:
19:3d:09:21:09:a0:89:4d:93:f8:90:77:30:b2:50:
87:42:ad:d3:1a:34:43:82:ed:6c:3c:93:00:8c:82:
e0:2c:5c:83:4c:1c:5f:85:4d:37:16:71:9e:56:77:
9d:df:67:af:77:64:04:0d:c5:da:c0:4e:3b:d9:5c:
95:d8:fa:fe:80:93:b3:2c:cb:5c:63:a8:94:83:18:
d9:48:22:26:b1:ab:58:13:c5:b7:f0:c4:18:76:24:
ff:47:8a:40:3b:37:f6:13:e6:db:88:6c:19:12:e0:
3e:e5:7c:77:72:a2:33:e9:8e:e6:e4:8e:33:8b:99:
b3:37:fc:65:78:66:c1:85:1f:c4:03:63:4b:f7:63:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.157.0/24
IPv6:
2a12:c580::/29
Signature Algorithm: sha256WithRSAEncryption
a0:87:d1:5a:04:34:c2:f8:d4:96:f6:c4:47:4e:ee:87:f0:df:
ca:34:59:35:00:5f:dd:19:ce:bb:98:3c:3e:25:2c:fb:61:99:
3e:76:9a:c5:fd:e1:08:62:77:c8:9f:2a:4e:71:41:e8:64:02:
af:80:b8:9f:3b:77:8b:c8:80:c4:40:44:ee:d9:65:34:1e:a8:
48:11:e2:88:21:fb:4b:95:e1:61:b5:f0:08:d6:68:5a:9c:9d:
ab:2f:96:6f:60:a7:5b:22:52:c5:04:82:10:74:61:af:a4:98:
27:0c:1d:3e:2f:d7:da:ac:87:50:8b:58:2a:a4:0d:58:16:96:
5e:ba:a4:8b:af:5a:56:8f:86:a2:5a:e6:b0:ce:9b:6f:02:82:
90:45:60:e5:63:99:15:5d:22:79:4c:c9:dc:58:05:c6:5f:f9:
ef:73:d1:33:14:26:e6:1c:1f:54:ee:6d:ed:24:5d:2b:c7:0e:
c3:e3:5c:06:10:0b:b6:4d:5a:87:ee:37:06:40:5b:44:c7:83:
20:5f:8f:be:55:9f:31:0e:0b:53:ab:d9:cc:bb:7c:ba:55:e4:
45:ee:c0:c9:4b:83:aa:f7:08:14:1e:58:88:3f:44:f7:48:d2:
b0:cc:da:40:c9:76:32:cd:92:69:90:4a:3c:7e:99:fb:e2:df:
d1:2f:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:06:14 2024 by rpki-client on console-fra.rpki-client.org