Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer (raw, json)
Hash identifier: fcRgT6TiTses5PRPa5aYt5xDiJMAFbxuc64gNSmUd5E=
Subject key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72098830E3BBF7DC317B1AFB5F0AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.246.122.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:20:98:83:0e:3b:bf:7d:c3:17:b1:af:b5:f0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:7d:93:cb:63:b8:58:34:bf:29:b0:aa:3b:
fe:1a:2f:13:80:f0:1e:d5:54:c2:9a:46:ab:0f:63:
e6:09:2a:6f:36:5e:02:13:f7:ec:5c:86:a8:18:4a:
3b:4c:e8:46:34:e5:95:89:af:e4:ba:9b:43:62:b6:
c6:c6:7c:0f:69:c5:3a:0c:23:e3:a3:5b:f2:a8:d5:
41:fb:f7:40:ed:ff:7f:fa:bb:59:a2:98:b2:93:ad:
3f:74:b4:46:84:2e:0e:48:98:22:ab:db:3b:cc:fd:
f4:1f:f4:08:71:b7:cc:6c:9b:cf:38:36:fe:c4:f8:
aa:2f:cf:d7:72:35:a5:70:70:b2:48:7f:c2:67:50:
f7:de:8f:34:89:71:b3:6d:3a:3f:5c:1a:64:2b:c0:
68:8f:6d:45:d4:a2:35:50:ac:96:ba:fb:3e:69:d1:
54:95:cd:35:3e:04:a4:9b:73:f8:f4:2e:0a:c4:96:
55:9b:45:1d:1f:14:c2:3d:9f:b7:16:43:a0:ad:0b:
4a:63:17:cd:7a:d3:41:7a:d0:75:96:18:ce:08:84:
21:fb:76:89:83:31:e7:82:ba:51:36:f8:ae:63:b5:
3c:fc:d0:29:5b:72:e4:60:ff:70:62:6e:f6:7d:3b:
92:97:6f:7a:b9:19:03:f9:f0:65:a9:21:f9:30:62:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.122.0/24
Signature Algorithm: sha256WithRSAEncryption
16:07:40:be:73:77:fc:be:53:86:a8:55:45:d1:c4:2f:93:36:
45:81:a3:15:34:cd:ec:7d:28:e4:63:73:c6:55:37:8f:44:4b:
68:5a:da:52:d1:de:aa:79:47:7d:d8:75:c4:23:ea:4e:92:a3:
c4:b0:a8:52:b3:fb:7e:37:ec:8f:fd:02:3a:b4:10:14:92:6d:
5b:b4:f8:f4:55:09:43:49:65:a2:ab:de:90:53:84:96:cd:b1:
b7:22:0d:99:3e:0b:64:e8:ff:0e:05:fd:f4:e9:5d:33:47:55:
61:17:2a:45:bd:80:bf:81:ea:87:c8:69:d1:34:b2:41:0d:62:
ce:e1:22:d6:17:d9:9d:38:8b:3f:7d:c1:a0:17:ba:f1:a2:12:
14:b3:84:bd:63:2a:10:f2:39:d6:4f:65:43:98:89:81:92:05:
26:bb:7d:4f:9f:32:3c:33:16:6e:41:43:76:e1:e3:55:9c:90:
19:be:f8:22:00:86:90:ad:10:bc:24:b2:2e:c3:99:c5:3c:d8:
ed:d0:c0:c7:04:95:3c:c3:5e:91:1a:4b:d5:aa:fe:8b:c7:f3:
b6:77:28:57:30:b1:49:f4:50:57:a8:ad:b9:93:1c:57:39:12:
15:46:10:c8:d5:06:c0:1d:6e:d3:a1:c7:5d:fc:47:5f:0e:65:
f1:a7:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:36 2024 by rpki-client on console-fra.rpki-client.org