Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
File: aBHhJcs1cHby-jE4yT6aJoGxeJM.cer (raw, json)
Hash identifier: cxd3zvPWU8tOf36/J52tdA7LxI0abPUDVNIWOB/YjHk=
Subject key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5010BB2E3C0D1F89CB17EE272C945E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.186.228.0/23
IP: 95.172.83.0 -- 95.172.87.255
IP: 212.118.227.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0b:b2:e3:c0:d1:f8:9c:b1:7e:e2:72:c9:45:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:00:43:1f:b5:cc:f7:a4:3a:ab:15:d8:00:
ec:65:6c:f1:9e:29:19:f6:c5:b9:8d:cd:b9:ae:83:
5a:f3:6e:22:1e:f7:25:05:88:21:86:22:8f:d6:49:
a7:13:0f:a9:fa:b8:3e:66:51:b7:6f:e6:c8:92:d3:
7d:cf:7b:70:e3:be:fb:f9:98:06:99:cd:5f:db:87:
6a:b7:ba:a3:a3:d1:5d:59:95:e7:24:a1:8c:36:6a:
8f:cf:28:04:e4:be:37:34:75:ed:50:af:3b:38:61:
ec:64:db:59:67:66:ae:79:83:71:af:20:2f:2d:b9:
f8:0a:03:5b:ea:1a:d5:8e:5d:58:ef:b4:3a:41:75:
54:ab:c6:75:c7:5a:e0:13:a8:54:37:bf:f5:1b:8c:
38:e0:85:ef:0e:ee:97:4e:c8:ea:56:3a:fa:62:c8:
27:50:00:12:de:53:43:d5:32:0e:a2:9e:e2:e4:20:
9f:f4:7d:c5:2b:d0:01:d8:79:6f:9a:3e:26:f0:fa:
5b:f0:0f:48:ab:51:d5:92:26:db:ba:65:48:b3:b5:
59:6c:1f:85:f3:d9:9f:6e:2e:68:a2:c4:aa:42:68:
9d:a0:95:3b:e7:90:5e:76:9d:5b:21:4e:e4:f8:86:
bb:e9:85:2a:d1:a2:62:80:09:f7:c2:24:8d:06:e2:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.228.0/23
95.172.83.0-95.172.87.255
212.118.227.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c5:1d:6f:84:c4:6e:e6:42:87:4f:c0:64:cf:28:c3:ea:34:
05:fd:c5:f2:75:72:e4:7c:07:ad:a5:cb:ca:06:d2:15:62:b8:
08:33:89:89:cc:23:2e:50:c0:b1:23:6f:af:c8:ca:39:11:ce:
7d:33:64:b8:bb:c2:f4:79:97:c4:e6:9f:89:cf:ba:67:13:c8:
1f:85:e6:91:65:99:a0:2a:c5:7c:54:fd:9b:f6:df:3f:a9:d8:
08:4f:57:2c:8a:aa:d1:cb:ef:50:88:3a:bd:75:96:8f:bc:bb:
74:01:24:a6:5b:5c:05:e9:ca:a4:b7:03:da:7c:c0:fe:06:87:
f0:77:e8:ad:ab:6d:18:be:e7:0b:9c:32:29:1f:fa:50:f6:75:
5e:4d:cc:2c:d7:f2:ea:4d:06:7f:fd:cd:00:9d:c6:cd:04:c8:
4f:ed:23:e2:ba:07:c5:6b:99:9a:7a:03:fb:c5:50:b9:48:d0:
14:54:e3:e9:cb:3f:0f:ec:1e:ee:ee:eb:60:85:79:00:a4:d5:
7e:0a:74:9a:49:d0:b0:f7:91:88:1a:a5:03:d9:e6:98:3a:ae:
99:c3:0c:86:f0:5b:75:59:67:d1:8f:29:9e:b7:60:5c:1e:6f:
f8:e1:aa:70:ec:0c:42:84:98:79:a5:46:0d:95:0a:10:84:1c:
04:62:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:39:58 2024 by rpki-client on console-ams.rpki-client.org