Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
File: a0dcb7gDO14R19tfLJl8hLpyXKI.cer (raw, json)
Hash identifier: 8k3/K+jtW1dnYlsu5RilaOISi3sTfQplM8TQyczbJpY=
Subject key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EF2407BE4C6B828572281B2D487FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.227.245.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f2:40:7b:e4:c6:b8:28:57:22:81:b2:d4:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:80:f7:87:c1:a3:f6:d5:9d:78:98:c0:97:
48:a1:bb:fe:4d:dd:0a:34:70:c6:f0:c9:5a:61:68:
f9:b2:db:04:fb:16:d3:2f:46:6d:81:a6:97:69:61:
35:d3:c1:77:3d:f1:f2:5c:26:a3:16:14:a6:96:fc:
0a:ce:ec:0f:af:60:0c:78:53:ae:20:16:87:39:e8:
37:13:83:8c:06:56:61:4d:2b:4e:3d:3b:28:d0:44:
b4:7e:77:0b:53:4b:05:33:e5:e0:5a:cb:f9:06:13:
22:11:85:2c:5e:3f:d1:3d:48:44:bf:5c:f7:b9:1b:
d3:e2:ba:56:24:b1:dd:2f:f5:fb:1a:c5:5a:66:dd:
31:67:e4:68:ca:bc:32:e9:04:42:33:65:f4:5f:43:
b8:41:54:94:0a:c8:f3:78:4e:fb:ac:e6:49:8b:8f:
6c:e8:53:35:d0:6b:60:1b:51:48:93:a7:be:36:98:
b5:85:8e:59:35:fe:4b:69:9e:45:4d:7f:ec:c9:cd:
0e:f9:89:e4:67:8e:3f:e0:bb:e3:c0:69:19:cc:eb:
e0:5f:fc:20:dd:21:1c:92:bc:bc:37:19:d6:0f:cf:
6f:b2:09:ea:6d:14:86:43:86:7d:08:1f:d9:cb:5d:
1b:c8:87:eb:98:d3:ce:51:b1:48:fa:84:f7:d7:19:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a9:e0:e8:74:e4:eb:50:5c:4a:cd:29:0f:aa:c3:2a:de:d4:
4b:96:cf:19:17:d0:29:54:5f:61:cc:d4:f7:cd:e6:33:86:34:
e9:8a:06:f5:cf:c8:f4:b3:ea:ae:e7:59:ea:42:60:61:1d:37:
3a:ec:f6:ef:cc:ab:a5:07:84:e6:90:ad:e5:10:2f:1d:52:6f:
1a:6e:4e:ef:21:21:65:2b:0c:2a:62:9f:f7:d0:b5:f2:67:6e:
20:77:99:c1:e4:9f:c5:c7:8f:b3:2a:8e:93:d5:35:76:0e:18:
42:77:8b:5c:e0:16:78:bb:aa:de:1a:1b:56:91:0e:a0:69:9e:
6b:6c:6d:75:78:f0:54:f6:07:6c:81:38:a7:15:c6:58:b1:cc:
d6:4c:9d:35:b5:e2:94:74:06:fb:6b:9f:e1:6f:cc:62:a4:58:
91:2f:84:0c:ed:0a:10:81:a8:e9:a1:87:e4:d4:9c:9d:fd:47:
44:91:1f:07:75:18:ae:78:65:35:55:3f:e3:79:9b:33:6f:c6:
4d:0f:cf:b1:6a:d5:12:fc:ec:88:2e:a9:df:1f:cd:cc:c1:da:
19:9d:bc:c8:53:fb:7b:e5:b1:3d:e0:77:78:18:34:6f:30:d7:
3b:a5:9d:91:16:9c:d8:5d:30:7f:0f:9b:14:64:ae:8d:91:b9:
3e:8e:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:23:59 2024 by rpki-client on console-fra.rpki-client.org