Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer (raw, json)
Hash identifier: 8jWCKZ5meeR5FYYZ9duhoSWHtY7KHvEOtzNHem7TJHc=
Subject key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0E0A6DAA2B1ADECAA2242BAC4326508D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 09:55:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.244.252.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:0a:6d:aa:2b:1a:de:ca:a2:24:2b:ac:43:26:50:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 09:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:4f:8d:10:20:a6:c4:95:89:26:e4:cf:2a:
a5:00:8d:77:31:46:97:8b:3c:a3:8c:8b:7d:36:d6:
b6:8f:b5:9d:c2:3f:fe:8a:8c:1b:d4:8e:36:ba:ba:
59:5a:58:7a:f2:ad:f0:25:42:9c:48:23:17:03:de:
a5:de:40:f9:4c:63:f7:a6:e4:8d:58:63:a4:38:f3:
e0:08:d2:80:fb:b3:54:21:7f:ce:f8:e6:ce:33:ef:
4a:d5:c4:c0:b4:d1:cb:ba:f3:65:93:be:ad:f4:fc:
b3:46:94:e5:d0:47:91:35:e6:81:ad:d4:d7:b8:08:
2a:c9:76:83:51:c6:bf:57:43:de:5f:df:4a:36:6d:
a1:1c:36:2e:27:57:23:be:b4:a5:7c:84:5a:13:3a:
d9:8f:39:74:7d:62:ea:7d:af:85:e7:ba:1f:ce:52:
b7:84:b6:56:3a:da:08:c7:d4:5a:b7:f4:34:f7:90:
72:ed:a4:a8:23:f9:c7:f2:f4:05:07:14:0c:41:5a:
97:f1:5e:f8:86:9b:cf:6a:95:07:b8:d5:19:61:05:
eb:b7:c8:b3:81:5e:ae:ee:9e:3c:30:d3:ed:11:ba:
9a:de:3a:a5:4c:d2:e2:09:00:55:13:e1:ad:cd:81:
52:33:70:26:40:ed:ad:dc:70:8d:ca:9e:b5:d0:0f:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:cf:e6:53:4a:d4:cb:84:b6:d4:42:b0:ed:ec:e7:88:9e:84:
76:d5:02:4f:da:fe:0a:29:c2:15:bb:cb:92:46:8b:a7:ed:79:
e4:37:f5:7b:a0:3e:f4:46:c6:6b:cb:e8:8c:84:4d:d1:a0:8d:
f9:44:55:68:7a:3a:8c:9e:4a:8f:86:53:24:03:cd:bb:cc:5b:
a2:bb:30:e7:95:63:1e:b0:50:13:3f:d9:ef:e2:6e:6d:b7:2a:
07:ba:c7:38:5a:ed:c7:80:1a:42:07:90:82:49:19:9d:f6:24:
40:a8:e5:b6:1d:15:dd:51:36:79:2d:95:1d:ac:1b:73:87:23:
73:11:d4:25:5d:e9:f2:c3:e8:b1:e1:48:0b:77:ab:02:e4:75:
f9:7e:f0:02:12:5a:0f:35:43:eb:04:8a:1f:89:0c:1e:1c:bc:
e2:77:f4:35:66:bb:f7:43:20:47:6c:9e:38:fa:01:ba:21:31:
d5:27:b2:8d:b5:a6:43:d6:e5:84:46:ed:71:e3:6f:a5:9d:30:
98:17:49:4b:b4:57:aa:29:77:76:24:88:6e:3b:83:c1:f3:27:
d9:01:d0:99:7f:26:68:ed:75:bc:fb:fd:f7:ca:1a:ec:2e:25:
bc:44:75:ab:8d:fe:3c:d5:43:e2:31:40:99:c4:26:9d:e9:bb:
2d:df:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:42:47 2024 by rpki-client on console-fra.rpki-client.org