Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.cer (raw, json)
Hash identifier: 1wd0pWCYoZdxvX5Zhi7cFxQPgQ3LFXICqME9JFyIfsk=
Subject key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72610C6032B765D039254C5E100A236
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.146.242.0/24
IP: 192.160.156.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:10:c6:03:2b:76:5d:03:92:54:c5:e1:00:a2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:66:26:77:a0:2b:87:8b:08:cf:a3:55:1e:
29:4d:40:a2:b0:0b:60:64:3f:d2:bc:ff:85:d4:3d:
77:60:33:3a:6e:39:6e:9f:0b:d8:16:9f:ca:95:25:
89:0e:a7:7a:38:65:28:a4:b4:64:77:88:b7:57:14:
ee:90:f3:27:e8:a4:83:cc:ca:e4:1b:5f:72:6c:e5:
96:06:88:d8:2c:fa:57:35:e7:33:ee:d0:5a:9f:a4:
bc:ac:e7:02:3a:5a:65:db:e2:08:9b:d9:de:8a:33:
49:2b:88:62:e9:3a:5a:ad:0a:fb:e1:cb:ff:7d:e7:
1e:7e:35:e0:d2:71:07:be:c3:00:d3:e0:4e:09:2a:
c1:4d:a1:df:15:3c:9b:9e:b7:82:99:7f:ba:e9:c0:
a6:1a:ac:a7:60:69:c3:15:27:26:47:05:bf:bf:ad:
ff:aa:4b:a2:41:c7:59:fd:8b:5b:9e:4e:1f:39:f0:
6e:cf:c0:b7:87:22:37:78:8f:67:85:55:88:bd:55:
3e:b8:c5:84:6b:85:eb:de:d8:7e:c0:fb:0d:d5:20:
ea:5a:f9:64:30:52:4e:cc:6d:08:e0:06:47:cd:9d:
ed:be:ad:82:87:0a:73:4d:bd:e4:7d:66:92:7f:23:
f9:a2:96:ae:78:b3:97:fa:aa:eb:2c:69:00:c9:cc:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.146.242.0/24
192.160.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:73:a1:da:fe:d9:bb:7f:76:2e:9e:09:3b:31:0f:4e:88:a4:
c2:96:ae:d0:9d:1d:e2:da:f2:10:64:48:d7:87:cd:6c:4b:36:
17:eb:a2:98:1d:bf:d3:c3:88:76:38:42:e6:2d:56:fa:1d:ff:
dc:30:b7:36:20:46:a4:f1:fd:ae:08:b9:47:73:1d:ef:07:9d:
45:9a:a4:10:d9:19:b6:30:63:4e:f4:72:ae:c7:96:d0:ed:8b:
86:08:0f:e3:86:64:3b:26:e1:ff:7d:e9:24:6f:de:e1:59:a5:
e4:25:60:c9:7c:3d:78:c2:5e:96:0b:32:46:a3:5b:5a:1e:ad:
69:94:3f:aa:c9:0d:a7:b5:e8:28:0a:62:a9:3f:31:f8:d9:87:
6d:d6:6b:95:f0:6d:8a:bf:a5:6e:a1:62:73:0c:98:ed:01:20:
02:47:58:c3:19:c5:e1:85:0b:c3:19:51:65:3a:9f:2a:4a:9d:
36:60:b3:99:da:01:68:05:80:03:04:19:5e:8b:94:a7:46:82:
5a:f2:19:65:8b:ea:ff:6c:9c:64:ee:65:29:ad:32:63:5d:b2:
b2:6e:18:44:b2:9f:19:bf:73:95:be:de:b5:6f:f5:2f:09:c3:
02:45:30:f2:b9:c0:5d:f4:23:a0:15:2e:14:0a:67:ee:0f:11:
33:b8:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:16:25 2024 by rpki-client on console-fra.rpki-client.org