Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
File: dPEFnCc8UO3PPc7fxYABUuyR26I.cer (raw, json)
Hash identifier: f0uF499f1YfWSblbBEItljUgAt/kJVHQ8p1hRRifRIU=
Subject key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726A6E71AACD194F672764E5D22CD0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.254.80.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a6:e7:1a:ac:d1:94:f6:72:76:4e:5d:22:cd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:12:63:5e:98:02:a4:a8:ff:3f:60:c9:7f:
98:db:4a:16:27:33:06:fd:17:0e:f0:22:11:1e:c7:
84:1c:99:0a:db:3b:95:c1:0f:e0:14:48:aa:6c:75:
86:9a:9e:7e:ec:2c:fc:62:62:88:69:69:ac:a9:3d:
c7:99:11:33:6f:8c:85:77:3b:ec:b5:b6:b7:1a:51:
d8:96:eb:3b:7e:a2:2f:c4:98:40:81:1a:8b:46:07:
30:25:d3:32:40:77:0e:80:db:56:60:dc:3d:ff:b5:
8a:3d:e3:96:2f:4f:a3:68:78:c0:52:9b:bd:02:76:
b4:ce:6b:fb:a8:fd:45:78:96:50:fd:6b:a5:bc:3a:
68:32:c1:aa:8d:06:43:f3:4a:aa:b2:0f:7f:82:4a:
28:8a:59:fb:01:ac:0b:cf:de:00:f9:5c:bc:32:67:
1c:1e:7d:df:80:78:49:4c:9a:ec:84:e1:9f:15:c1:
cc:4a:c6:13:4c:d1:a1:50:fe:e2:1a:dc:f7:1a:a5:
6f:a1:ea:ce:30:a3:99:e3:06:20:3c:6f:a9:16:01:
90:d6:11:fc:96:38:0b:98:10:a8:3d:50:a5:25:ec:
93:31:5a:ca:d5:0f:bf:e8:92:5f:bc:a9:40:9b:c8:
4b:29:90:29:6e:e6:a7:e1:01:a5:3c:95:e0:89:33:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:af:21:8f:fa:7c:a2:8f:1c:7d:2a:79:89:1c:9b:80:57:6f:
62:f9:ad:84:b2:e2:01:5e:a8:3c:f3:1e:20:21:16:75:1d:b5:
fc:4e:0e:3c:30:92:36:79:9a:53:ec:fb:51:51:68:6f:94:2d:
38:a6:ab:44:54:41:c5:51:84:01:e8:92:47:8b:0f:90:10:92:
8f:9a:f7:37:97:c8:3f:9c:b0:11:4c:58:58:10:6a:4d:48:37:
04:84:1c:44:bd:30:18:48:0a:27:3e:40:3a:f3:f4:ee:90:d1:
16:a3:05:d5:5c:85:e7:89:8c:7e:d3:1c:d2:80:55:a7:33:e2:
00:67:04:9c:04:21:53:1d:71:e8:8b:d8:9f:3e:59:57:1a:b0:
a5:0a:03:e9:24:94:2b:09:86:cf:1d:ea:22:ab:bc:bc:11:16:
09:64:7b:39:74:21:e0:51:0e:76:75:ff:75:82:59:5a:7a:74:
24:1f:ae:12:77:df:24:08:56:7c:7a:41:8c:05:80:00:06:d6:
a0:40:4a:87:ef:ea:ed:19:2a:a9:8d:ec:69:4e:e4:e2:ac:7c:
38:a6:ea:56:4e:39:13:b6:b2:d9:9d:cf:15:03:c2:47:2a:1a:
02:19:be:96:4b:5f:0d:f0:79:be:98:67:a1:c4:b9:b7:47:df:
f5:12:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:00 2024 by rpki-client on console-fra.rpki-client.org