Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
File: eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer (raw, json)
Hash identifier: /tOdhSK0zbbHDgzdlBg9NdpFnDOrR1y6TYnO9Vn3blw=
Subject key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9101405735F66F8F2E36AE948DB42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.150.149.0/24
IP: 2a09:4bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:10:14:05:73:5f:66:f8:f2:e3:6a:e9:48:db:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=787650d0951529b1a817232c12c42e49b889e1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:12:40:dd:da:50:0c:05:d9:86:8a:3d:20:
c9:d6:d6:2b:a7:17:fb:c7:6c:02:78:45:e1:78:69:
08:ca:74:79:2d:da:5e:ed:5c:24:a9:e7:48:78:91:
aa:0d:71:46:8d:57:16:af:78:71:04:06:e8:73:14:
9a:68:ed:a9:19:71:08:9a:78:95:19:58:62:86:d9:
1f:80:df:27:5c:b4:7c:09:e5:16:fa:a0:0f:3d:5f:
f6:e1:d6:dd:96:bd:74:ac:d8:4c:96:8a:2d:06:ff:
8e:8b:21:c6:fe:a0:bb:bc:c7:7f:e8:1d:24:32:01:
29:74:53:68:18:bf:da:20:36:3f:f9:b3:0b:2d:bf:
8d:a3:ee:0e:1c:c0:85:fc:03:10:89:b1:ce:80:5f:
18:35:b2:27:38:b5:71:9d:2b:2a:c5:20:93:54:69:
a4:0d:37:6d:f9:b0:a8:6d:8a:65:a4:0d:77:5e:27:
8d:ad:b6:3f:10:26:83:95:3c:55:62:33:62:22:6d:
60:3f:90:98:62:2a:e3:a0:a6:88:6d:41:b0:92:11:
12:4a:b9:83:61:0d:f1:4c:00:f2:2c:3c:c3:7d:03:
4e:e1:76:b7:60:3e:9e:de:ca:2a:e7:e6:b6:7b:c5:
ad:31:3e:11:24:87:3d:05:3a:ab:c9:9c:47:8c:53:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.149.0/24
IPv6:
2a09:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
27:0c:a7:eb:15:a8:63:94:6b:b8:00:bc:72:17:01:20:22:a2:
97:89:3d:cf:77:46:f9:98:02:d1:cc:d6:4b:59:e0:04:1f:e7:
3b:a2:e2:f9:6b:d7:28:80:2c:a1:44:c9:ff:db:01:6f:26:6e:
15:2f:10:d3:1c:30:4e:f4:70:b7:cb:14:49:b4:82:00:23:95:
da:73:75:4a:53:f8:40:96:66:84:d0:51:b3:19:04:db:d7:f8:
07:6c:2e:b1:f5:7c:2b:eb:89:39:ed:46:08:2f:d5:cd:03:67:
82:fb:03:9e:24:51:94:c6:13:a2:c1:a8:1a:f9:45:21:20:69:
71:1c:54:fc:08:49:f8:ea:db:eb:b2:fd:f2:95:13:28:fd:9f:
2b:94:76:b0:89:a5:55:55:0a:da:e6:22:9c:b4:8e:05:24:3d:
a9:a5:5f:01:12:24:93:17:7b:d2:31:10:5f:61:4b:b1:55:6c:
a6:79:4e:df:cf:13:d8:52:8c:24:ed:bf:1e:9c:e0:e5:d7:6d:
45:5a:a0:f4:3f:17:aa:d9:04:2c:18:b6:49:5e:34:05:ac:2c:
59:29:35:d6:8e:ec:2a:ee:90:f2:68:0e:04:f2:b1:59:2f:eb:
30:b9:1f:0b:74:93:cb:1a:38:45:b3:76:d9:00:c7:f6:dc:d5:
5f:0a:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:44:31 2024 by rpki-client on console-fra.rpki-client.org