Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
File: daRvv8jeUjM5XHPeUflVO7doRgU.cer (raw, json)
Hash identifier: xjHQQ7wFoTZaBGyKLTrc4qc82oIGtqpB/R1+Bixc8g0=
Subject key identifier: 75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72733532320B650C6111E4A38FFA3C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.57.249.0/24
IP: 194.2.88.0/21
IP: 194.4.224.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:33:53:23:20:b6:50:c6:11:1e:4a:38:ff:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75a46fbfc8de5233395c73de51f9553bb7684605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:96:df:8b:38:77:de:b8:35:20:35:98:14:
37:dd:33:a2:3f:d3:25:fe:b8:7a:19:44:88:3b:b4:
6b:10:b6:ca:ed:f4:1e:0d:21:91:1d:5d:ed:b8:f3:
5c:5d:37:d6:34:69:61:8d:14:6c:f8:9e:8c:aa:35:
dd:f6:13:be:8d:73:50:bf:48:4b:21:54:f3:d5:63:
8a:6c:04:db:1a:87:18:bb:5c:f9:54:2b:b5:c0:0e:
2b:e0:92:2e:5f:b4:d0:c7:9b:48:c6:36:c6:98:75:
5b:24:1f:18:7f:c6:ef:d6:60:ba:03:ce:06:c5:f9:
b8:e0:2d:a3:ab:2f:42:40:2d:d8:0e:da:01:3a:a9:
30:7b:8b:8c:ae:50:2c:b6:c4:bd:f2:a1:a7:b3:27:
d7:e0:0a:18:f2:8a:e5:f4:3a:5c:a2:a4:4f:36:8e:
71:cb:00:e9:3d:f0:72:03:08:4f:82:95:03:60:7b:
d2:ff:e6:62:f5:fb:3f:8b:ee:ae:3d:da:54:9c:3c:
f3:e2:f4:77:c6:77:ad:e2:d3:da:db:ab:6c:3d:37:
3e:d7:08:31:35:b7:e4:1d:ff:f6:7a:01:77:9a:54:
ca:76:3e:6a:97:70:4b:57:3a:69:a8:c9:31:17:20:
02:13:eb:b4:05:e8:0f:29:4b:97:37:e6:37:1b:04:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.249.0/24
194.2.88.0/21
194.4.224.0/21
Signature Algorithm: sha256WithRSAEncryption
14:f2:2a:f7:19:47:81:14:5f:3e:cd:96:a1:87:9a:aa:4c:60:
07:2f:3e:00:15:4d:35:a2:b8:ab:2f:2d:99:cb:ed:47:46:ed:
dd:ee:fb:6a:c3:4f:e0:02:db:e8:31:bb:da:0a:01:1f:6b:01:
33:e7:f8:9a:a5:0b:7a:da:3d:5c:fa:10:2d:78:4c:96:e9:b1:
1f:5b:7e:0a:3c:d1:11:e2:e7:bd:e3:3b:39:cc:2a:2c:24:8c:
47:c7:82:62:1c:47:9f:ed:87:7b:bb:a3:6b:c6:bb:4b:ca:59:
d3:39:6c:ca:3e:fc:93:5b:09:19:88:fb:2d:e5:e7:b4:fb:5f:
ca:e9:74:12:38:8a:7e:d0:5f:ec:9e:82:e4:16:f5:52:78:26:
78:bd:50:57:e4:24:b9:d3:16:43:38:f9:b0:9f:d7:d5:ea:1e:
d9:48:a0:67:7d:42:fa:c6:48:6a:94:b8:f6:e8:4c:de:59:65:
6b:3f:cf:c4:57:67:5a:89:e9:e1:d0:ad:25:82:0c:b0:6a:8d:
bf:f0:8c:c6:fd:42:2e:4b:36:34:f2:73:2a:76:4a:65:2e:40:
bd:1c:13:6c:67:db:79:ef:ad:be:5b:d1:85:3e:25:0c:c6:f3:
e3:92:f2:af:1f:5c:3f:83:59:9c:58:e6:72:78:18:94:e6:89:
e6:98:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:01:29 2024 by rpki-client on console-ams.rpki-client.org