Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
File: duK6XMFQs1PL00ufBF6gUJdAhE0.cer (raw, json)
Hash identifier: gimfqowc5l+NWidpMBMvVIi7VVqkgZnBszZj84pywdA=
Subject key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC46386E1BEE0234493720414D264A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.211.120.0/22
IP: 2a0b:6540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:46:38:6e:1b:ee:02:34:49:37:20:41:4d:26:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:35:49:e3:29:8e:b9:cf:35:8d:e4:68:59:
de:46:08:e1:b3:f8:50:83:0f:13:f7:7c:7a:66:72:
7a:8f:c0:ea:d9:62:fc:3a:bd:b6:d7:2e:7d:36:28:
ff:9b:45:5d:b4:80:51:77:4a:7e:c4:96:cd:0f:6a:
c2:0c:3d:6f:58:ce:0f:a0:37:17:3b:b1:ca:44:89:
d8:0e:f7:68:af:1b:1f:6c:fb:15:50:0b:f3:57:1e:
af:12:98:04:78:f1:df:63:5c:05:16:67:2c:0c:93:
8d:8b:66:0f:73:78:94:f5:74:74:7c:cd:f8:43:8e:
50:5e:8c:74:ef:c2:01:f9:f3:9f:64:5a:46:2d:d1:
6c:40:42:bf:0a:f9:82:ec:1b:f7:3d:85:f8:71:5d:
25:f5:9e:b5:b1:6a:b1:3c:bf:64:d4:d4:1d:5b:f9:
83:1a:7f:55:c6:e4:84:74:2e:36:d1:aa:d6:ba:97:
44:a8:1c:72:53:b5:1d:ea:6b:d4:a7:35:b3:5f:c1:
a1:ba:50:cc:a4:74:85:a4:c2:c0:be:6b:39:c0:aa:
7b:7b:44:40:f8:25:f1:22:38:c6:f5:ee:56:49:db:
d3:43:d4:f8:03:ad:4c:dc:85:d6:d4:ce:bf:90:72:
83:09:dc:ba:49:33:f3:d0:4d:9f:2f:2d:3c:5a:52:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.120.0/22
IPv6:
2a0b:6540::/29
Signature Algorithm: sha256WithRSAEncryption
53:92:ea:13:f5:68:09:73:77:52:13:67:69:76:26:c9:62:b7:
45:87:b4:ca:a5:11:16:54:9f:69:86:31:6a:e5:71:c0:44:80:
f5:f7:50:71:f8:f5:0a:a8:71:c1:b0:65:1c:ce:e9:ce:49:76:
16:53:0c:5a:e6:11:11:92:0a:50:f5:71:c1:66:4b:0b:70:68:
31:81:b6:49:3e:64:52:76:6b:88:a1:97:47:cb:17:6c:a5:35:
0d:cf:45:f5:e8:e7:ae:35:b2:92:a6:7b:7b:7b:be:0f:e8:7e:
65:69:dd:a9:d5:44:f7:33:b4:bb:97:f5:f3:45:c4:b5:0f:9c:
76:8f:88:f7:07:1c:52:05:f6:eb:35:e1:59:83:93:af:d9:d8:
10:26:88:ef:01:35:db:87:fb:28:0c:46:70:a5:fb:6e:be:d1:
21:01:b2:01:8f:f5:82:fb:06:3a:1d:52:2d:9b:de:42:c9:7e:
2d:29:fe:2f:3f:71:8a:60:6f:98:3b:58:3d:5f:e6:fa:7e:1e:
3b:6e:61:04:7b:15:09:25:a0:99:8e:52:9c:2f:66:9c:8e:e4:
6c:09:d4:d3:ac:fb:1a:22:17:3c:a8:1d:ac:b0:fe:d2:8a:55:
67:57:97:aa:28:8c:44:7a:47:88:0d:50:ef:13:01:d2:a3:01:
71:73:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:01:09 2024 by rpki-client on console-fra.rpki-client.org