Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.cer (raw, json)
Hash identifier: ibKmDSb3QbGtd5efV6tLFD10TseDuZBRA6IyXjFQ4GE=
Subject key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB10A491B30F795D6BB3158F59EB71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.173.20.0/22
IP: 2a0b:3100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:10:a4:91:b3:0f:79:5d:6b:b3:15:8f:59:eb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:12:de:12:bb:5f:19:3b:b1:9d:6e:e3:9e:a7:
8d:69:b2:9c:69:85:58:15:27:10:73:62:be:6c:45:
8a:97:8c:e5:cc:ed:13:07:06:31:b5:bd:43:e0:5b:
b1:0b:c7:ee:b9:91:2f:31:78:38:67:4b:db:16:13:
77:93:c9:6c:e0:6b:44:d9:11:90:f1:5b:b0:af:01:
68:70:d1:11:95:62:49:df:59:82:b4:a5:e6:60:f6:
80:02:22:f2:02:08:0c:a9:f1:b2:06:d3:12:e9:c0:
97:04:27:6b:76:ac:50:3f:6a:31:35:35:c4:ac:99:
6f:ea:cd:84:0b:0c:68:ef:8c:4a:61:9a:66:2f:c3:
2a:51:35:7a:8b:7f:5d:9c:0e:8f:a5:34:48:71:58:
83:3e:7e:e2:77:d6:6d:07:d8:91:1d:cc:6e:3b:c7:
f3:86:1d:ca:3b:60:72:1c:08:22:37:9e:0e:7c:bf:
4d:2d:73:90:f1:e8:49:d2:30:8d:44:ef:2c:b0:5b:
38:7c:08:25:ac:74:1b:92:56:df:53:2f:06:dd:8c:
39:f3:74:39:f1:9d:87:0e:b7:39:69:7e:1a:e8:a2:
bd:e3:a4:1e:8b:70:81:29:50:dd:e0:e6:25:69:b8:
27:ec:64:f7:1c:79:0b:5a:ab:bf:c2:5d:32:44:b4:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.20.0/22
IPv6:
2a0b:3100::/29
Signature Algorithm: sha256WithRSAEncryption
2a:48:59:bc:17:08:60:cf:32:4c:06:e4:94:63:47:16:3d:c8:
f6:14:42:dc:3b:c4:ab:e2:f5:ee:d1:9d:66:f3:45:88:42:6d:
21:a5:8a:27:d3:9a:a5:27:ae:c8:cd:7b:e5:75:2a:ca:5c:4f:
56:83:3e:66:40:31:a3:05:d2:a8:90:ab:74:ba:9d:6c:f8:f4:
33:21:73:9f:0a:6c:5a:e2:0f:50:7a:c5:75:ad:94:e1:b7:02:
93:64:f0:bc:dd:03:6c:1b:24:d8:70:95:f7:15:4c:06:b4:f5:
36:7a:e5:33:36:45:32:81:e5:73:b7:5c:5f:2b:af:3f:fd:d8:
e7:57:4e:8a:9e:04:91:5d:e3:44:b1:63:9b:0a:20:14:92:db:
b9:a3:63:5a:d8:96:cd:94:9c:1b:db:9c:ab:18:91:c5:6e:f0:
01:01:fa:ca:e7:09:06:2c:db:fe:7e:18:2d:12:2a:a4:c1:bd:
96:27:4b:6f:78:7a:aa:81:06:05:e6:fe:7a:d5:0e:39:ad:9a:
c5:0d:89:d0:a8:71:bd:7a:6b:17:86:86:2c:27:d4:75:a6:56:
96:b3:2f:c0:5e:f8:e3:2e:29:93:dc:32:d0:37:f2:16:f8:03:
aa:9e:22:7c:49:12:3e:d6:56:a0:ca:51:cc:94:96:34:a5:8b:
e1:99:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:43:09 2024 by rpki-client on console-fra.rpki-client.org