Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer (raw, json)
Hash identifier: 1xHEMh/892atZ8tVZy6mN1dxIF1kQiBNWU5Jp2bAlYA=
Subject key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79488C04456A848BBF0CCD34FD414F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.162.17.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:88:c0:44:56:a8:48:bb:f0:cc:d3:4f:d4:14:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:f4:a9:5b:52:c9:e3:f2:a6:8c:14:36:7f:
7b:6c:67:6c:b8:08:af:34:23:73:d7:c4:9b:aa:43:
fb:19:25:f4:66:c8:60:7e:4b:ba:50:f9:1e:c3:73:
fe:45:3b:b0:e8:0f:44:cb:4a:8b:75:fe:04:64:17:
e4:c6:49:b2:42:c8:69:30:11:12:6d:ad:e4:4a:40:
e1:b4:64:b6:65:1c:eb:91:6e:28:b3:3d:02:e5:a1:
bd:50:01:a4:90:16:93:35:f1:fc:9a:d3:25:66:fa:
26:cc:aa:d2:cb:50:fe:d9:2b:ef:a2:6b:5f:86:de:
1b:ee:b6:27:d8:ad:a3:9a:4b:f0:ad:47:12:ed:34:
72:0f:24:44:9e:18:4e:c8:13:82:57:85:9e:fc:fb:
bb:72:9a:b5:e9:36:ce:ac:15:76:75:d4:31:a4:7d:
c4:86:b0:97:27:68:a1:1e:c9:3d:bb:fa:1c:8d:66:
2b:e7:cf:ef:64:35:00:b6:8d:55:f7:fa:b7:96:81:
b5:35:30:7d:f2:67:db:fb:74:b8:86:c4:af:dd:be:
a6:48:fe:b5:7d:32:0c:c7:5c:48:6b:af:3b:5c:81:
2d:f4:0c:bd:37:cd:df:7f:63:a1:b6:86:a7:03:0d:
f6:03:bb:9c:fb:7a:75:98:d1:db:e2:ab:f5:70:39:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8b:0a:d4:61:fd:40:39:4f:9f:42:dd:c9:e8:84:3a:19:d1:
99:7a:4f:0a:aa:d2:3e:cc:47:b0:7c:bd:04:ad:e4:73:7f:85:
55:db:ec:53:76:2d:53:ae:ad:67:33:d8:66:6a:4f:a3:35:8c:
d7:b3:23:87:05:9c:4f:67:d2:64:94:4f:c2:05:36:f0:8d:1e:
e8:d0:83:c6:2a:79:1f:a4:af:b7:8a:06:b7:e0:1e:c0:69:cf:
96:36:f7:8e:12:69:a0:ef:6d:89:62:17:49:e5:bf:d6:be:93:
6c:83:50:88:32:c6:39:8b:62:83:e4:6c:01:d5:0e:d8:e8:54:
5a:fe:e3:6a:45:fc:06:d4:2a:6c:e6:de:26:49:1a:09:56:f2:
cf:8b:e5:9c:8d:67:04:5a:ef:3e:f7:68:ff:0e:b7:b9:c2:50:
b8:64:92:9f:8d:3f:15:cc:03:dc:b9:b9:85:ef:cd:35:8b:b7:
6d:1a:45:60:52:65:d9:fc:f2:07:d7:df:e1:63:8c:2d:d3:57:
04:c5:78:27:c7:f9:63:d9:51:a0:6a:e7:06:e9:74:4d:3a:38:
c9:39:6d:8a:78:84:31:91:ee:b1:e5:7b:18:9f:0e:a9:37:a9:
0b:35:85:20:1e:d6:ea:94:18:37:5d:ed:96:3d:ee:d4:70:3b:
ef:59:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:46:25 2024 by rpki-client on console-ams.rpki-client.org