Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer (raw, json)
Hash identifier: 9PcvUaA/3ETuxr2JVNp84YBHVabLsT3i+XqPzDKWgzk=
Subject key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349577CEA18A876B23A67057ABA1DA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 134.246.0.0/16
IP: 192.44.66.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:57:7c:ea:18:a8:76:b2:3a:67:05:7a:ba:1d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:87:29:47:34:a1:ec:18:e1:7f:9d:6c:a2:
44:28:be:19:65:d5:34:d8:5e:4b:53:39:81:f1:0e:
8d:a8:ca:74:d0:8a:e6:87:1b:4b:ae:cd:97:9a:fe:
cc:d1:62:6e:7a:dc:18:ea:78:08:7a:fc:6e:f6:d7:
ce:35:d3:cd:99:a1:13:91:88:df:0d:3d:05:54:84:
5b:f9:31:f5:8e:9e:8d:d6:a5:5e:ac:cf:77:69:16:
ce:e8:3a:a6:69:f6:06:28:aa:a3:eb:85:b2:d3:8a:
f8:84:d8:4a:81:5b:de:d4:fe:da:d5:3e:db:ae:eb:
cc:69:90:c8:f7:a0:07:79:df:e4:dc:23:0b:37:44:
4f:f8:00:0f:95:15:2e:35:8b:2b:34:13:98:be:ec:
76:8a:95:47:79:d7:6e:e4:2b:f7:94:66:65:ab:05:
81:d3:c7:01:5f:2d:63:bf:63:a2:69:ae:dc:b0:f7:
26:d2:96:4d:90:2b:3e:46:15:79:c5:ae:a0:ad:7e:
d2:f0:99:9c:1c:e8:58:64:be:e2:19:cd:a1:0e:56:
18:37:99:4b:f5:0f:83:d3:f6:44:9c:4c:24:12:5d:
ad:d5:c4:95:fa:5b:4a:69:0c:d8:54:14:59:b1:f4:
40:cb:de:d9:e5:03:be:80:fd:20:9a:ca:57:07:22:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.246.0.0/16
192.44.66.0/24
Signature Algorithm: sha256WithRSAEncryption
36:59:49:a9:ef:4d:d4:fc:b9:85:7f:a5:f8:36:65:76:14:97:
05:0c:46:31:6b:67:c8:1f:b7:71:34:50:37:45:a2:69:d2:c1:
61:b2:e6:6e:4b:07:45:df:be:19:de:b0:68:26:a3:69:9a:36:
6d:4c:03:0b:df:ec:58:77:bb:ba:80:1e:02:97:5a:24:ab:7b:
3f:ea:4c:c9:bc:7d:93:de:b5:d4:4f:b4:96:55:75:6a:82:a1:
04:fc:d7:67:c9:e5:7b:18:d1:9f:db:68:92:5a:12:f5:29:28:
b2:6a:c4:31:98:a9:a8:51:d7:7a:c8:14:c5:74:cc:16:5b:70:
a6:c7:79:e2:95:f6:8a:2d:9e:45:5d:02:a8:88:3a:83:0e:0d:
82:ea:e3:56:73:2e:51:d3:31:be:b0:b2:29:4e:78:88:25:70:
f8:5c:45:95:3a:bf:d8:e3:53:91:3b:89:a0:2a:fe:1f:db:09:
17:4c:d8:5d:14:e1:ac:db:2c:d3:c7:38:03:3a:e8:a1:f7:13:
9a:aa:88:87:ff:ad:f5:bc:19:ce:dd:8f:2e:e9:17:1e:fe:37:
30:e2:db:d1:d7:16:d3:bb:25:99:68:bc:63:fc:90:9f:be:17:
c0:b6:2f:fd:db:0f:a1:61:be:04:73:92:75:8a:eb:45:e2:62:
0c:4a:5e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:49:35 2024 by rpki-client on console-ams.rpki-client.org