Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
File: brZPqOBaLX9WSs8omudXxATN2dA.cer (raw, json)
Hash identifier: PiIXfQh57EW5Cwc8HDMibhRlrg3IjVajgsXEDPk1iiQ=
Subject key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019049DA7BBA19865F703F9ACC815D81737B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Jun 2024 10:46:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.164.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:da:7b:ba:19:86:5f:70:3f:9a:cc:81:5d:81:73:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 24 10:46:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:28:79:3a:0a:c1:4b:db:cb:a6:77:23:3c:
dd:bc:93:bd:74:b4:e9:60:db:42:ca:5d:56:0f:fc:
dd:b1:06:e0:cd:fd:21:82:ba:b4:82:06:35:74:c8:
24:e9:97:e4:21:ad:ea:ed:0f:0d:ea:d2:16:67:fc:
c2:39:27:ef:c1:2a:1c:7c:45:5f:a6:48:40:0c:65:
9a:5b:fc:a2:15:c5:66:c1:2f:31:6b:d5:f5:52:f1:
ee:2b:ce:0c:df:6e:d4:8b:51:e0:d2:88:4e:6c:f9:
95:e8:d3:e2:d0:7f:69:9a:d6:1e:ac:46:8c:05:18:
2e:fc:98:79:e5:e4:ff:71:aa:69:a2:ec:58:1b:bb:
8c:4b:bf:e8:f8:f7:40:51:14:ab:18:18:cd:b4:e9:
64:c2:53:e3:ad:9e:ca:aa:d1:c2:86:04:cb:2c:fa:
8f:f4:6f:74:cf:ff:ba:22:08:1e:4a:ea:13:43:21:
5f:41:a3:eb:b6:9c:93:c7:69:be:65:64:62:e4:59:
f2:84:23:fa:d0:dd:fa:15:eb:53:21:b6:60:14:b3:
ed:9e:03:b0:bb:6b:5b:55:0c:c5:94:30:a7:e0:dc:
31:6f:0c:81:1a:40:02:70:33:16:87:47:61:9f:bd:
c5:36:ba:dc:35:9c:93:c3:31:54:e6:be:07:d0:7f:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:27:7d:e5:ee:ca:cf:e4:b0:05:7d:82:46:97:74:89:ad:22:
47:3f:80:be:b4:af:8b:40:0e:1a:7b:54:6c:a6:3f:4f:9d:b5:
8f:fc:ee:2d:4c:fc:e9:30:cb:73:82:de:08:c9:4a:22:c7:94:
03:fe:25:88:6a:35:9c:91:21:74:5b:0f:75:93:45:6d:5b:77:
6a:22:b7:2c:c8:f1:5a:7b:fd:89:f6:2d:8b:1a:1a:3a:c7:23:
05:13:6d:f5:47:8f:03:d2:51:e0:b0:22:1b:d9:10:05:43:40:
7f:5a:f8:e7:bf:18:98:b4:b1:ca:e6:ac:51:1b:4d:3b:de:32:
e6:c9:cb:57:1e:d5:50:91:73:7f:49:0b:d0:ff:e7:53:7c:f6:
97:77:f5:85:3b:4a:d0:1f:01:d0:a5:af:52:ce:5a:0c:f4:ba:
bd:e9:33:34:2e:9f:0e:1b:19:d4:88:7d:dc:7d:18:d5:6e:ea:
9a:f5:81:b5:fe:4e:df:cb:b3:18:e3:a6:17:40:f2:fb:7b:c6:
c5:60:c2:18:62:2c:1e:c8:be:8f:31:5e:41:a5:4e:0b:79:c1:
08:3c:e6:be:46:64:7c:52:89:5c:80:ed:87:d9:fa:2b:f4:a8:
94:39:23:5e:92:4b:5f:ba:bc:4a:72:29:99:06:14:4a:9e:ed:
ce:ab:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:16:15 2024 by rpki-client on console-ams.rpki-client.org