Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
File: agPhC26juPNiz7I671icd3cefso.cer (raw, json)
Hash identifier: +s4a4MldrfegWqIFPRdt+RyRVfQCWPphDhn3hT/gufw=
Subject key identifier: 6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D196BB57D7D03B057E34F0C0D2F42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.114.125.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:19:6b:b5:7d:7d:03:b0:57:e3:4f:0c:0d:2f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:f2:d0:d8:65:02:4a:75:d3:7f:40:da:96:
04:80:34:1b:59:22:d8:ee:d9:2d:91:41:7f:4b:1a:
6d:75:7a:44:2c:54:e9:99:af:61:74:86:0f:42:66:
35:b2:d4:be:8b:d3:af:ab:27:ae:b4:4e:77:52:86:
c2:af:63:21:0a:ea:12:88:3f:5d:0f:b4:eb:de:4d:
ed:b1:f2:b0:fa:fd:10:9f:75:f5:45:3f:83:01:bd:
94:3d:ae:23:bc:ef:a6:df:32:55:da:98:99:67:d4:
f4:a1:f3:3c:a2:36:27:e4:22:df:71:29:e0:41:e2:
a7:13:9e:10:c4:74:16:02:75:38:88:1f:80:48:cc:
67:46:a8:8c:45:b8:79:76:f4:de:ce:aa:1e:6f:49:
74:75:7a:1d:c2:1d:d7:31:af:f3:29:9c:62:ca:4a:
91:14:54:13:c0:46:ce:ec:2f:e6:37:63:29:42:f6:
eb:2c:40:a5:70:a9:c7:bc:54:26:6b:75:c7:15:69:
57:da:da:b7:73:e8:67:ba:9a:12:dc:af:60:e4:18:
45:a4:d1:0f:3b:09:74:aa:37:cc:88:ce:88:46:cf:
bc:c7:d0:99:aa:ce:da:49:a8:a6:66:a6:ea:6e:58:
32:89:02:47:c2:1c:08:20:63:23:5b:d3:3b:a2:95:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.125.0/24
Signature Algorithm: sha256WithRSAEncryption
08:65:c6:53:ec:79:1f:c1:29:2e:a7:94:cf:15:50:b7:3f:a2:
0a:82:7a:77:30:18:52:97:b6:b0:6e:2e:20:c1:6b:a8:5e:38:
5b:81:a1:04:b5:eb:5a:8d:59:e8:74:bf:ca:42:d4:3b:73:d8:
64:15:43:85:62:f2:7a:f7:0d:25:49:9e:07:ca:56:1d:1b:25:
ef:6b:76:3d:b0:d6:67:9e:7b:48:a6:f3:7c:11:16:c6:18:ba:
7b:7a:f4:34:d2:bf:d9:ee:55:5a:f4:76:45:47:0a:af:66:d5:
c9:41:b8:85:cd:03:18:69:f3:bc:ab:7a:27:8e:22:d9:7c:1c:
5e:99:32:24:dc:b1:a1:0d:01:28:c6:95:b6:6b:79:12:26:eb:
e6:71:26:2a:57:bf:6f:cd:a9:90:0a:c4:40:a7:c5:40:ff:bc:
95:d3:dc:21:97:16:45:16:07:03:c4:63:be:e3:7a:37:43:02:
ad:41:44:01:bc:3b:1d:7e:94:53:ee:62:0c:c6:fb:af:b5:f7:
fb:7b:c3:a8:47:2b:81:f2:55:c1:76:7b:d3:b8:6a:5c:74:22:
f4:fb:00:f8:ac:42:4a:d4:50:41:8f:a0:8f:72:e1:da:dc:14:
d8:f1:99:7e:b2:69:72:1e:94:14:35:9b:a9:29:77:c6:77:de:
e9:80:b6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:46 2024 by rpki-client on console-ams.rpki-client.org