Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer
File: ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer (raw, json)
Hash identifier: lcGl4iXbdO8yxMYB7q63YUBYeEquGxJWZB3UuKG2Q2Y=
Subject key identifier: 79:DF:10:7D:6B:F1:CC:C8:18:F6:6D:8D:A8:DD:85:EE:92:4A:0C:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424601DF66B07C7B98454BF3C3FFBB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.142.176.0 -- 193.142.187.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:60:1d:f6:6b:07:c7:b9:84:54:bf:3c:3f:fb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79df107d6bf1ccc818f66d8da8dd85ee924a0cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:fc:f1:25:cb:2c:f4:66:95:d5:0f:6a:db:
a2:d2:23:54:d6:f2:e4:ff:93:ec:dc:d3:c3:c1:d1:
10:b5:ef:71:a5:65:5f:01:60:f4:cf:bc:d2:bc:61:
f2:17:13:ed:05:5d:e4:ad:b0:1d:46:87:67:0c:ab:
df:b3:24:99:9e:0a:40:a0:18:3c:9d:45:35:b4:cd:
c2:70:99:6f:c9:02:1e:d3:50:f4:68:74:17:e8:4e:
7a:d1:9c:90:c1:8e:19:38:27:14:9d:51:71:df:70:
64:81:e2:55:1f:d2:ca:2f:84:2f:41:ea:1f:87:5e:
73:03:30:93:a4:c0:38:f0:b0:46:03:d9:47:2a:9f:
60:a1:5b:4a:b1:5d:d2:27:a8:c6:49:18:3d:28:b9:
f0:1f:10:db:d6:45:3e:c5:3a:d1:b2:42:1d:c7:6f:
8a:ca:62:5b:0f:90:cb:ce:92:c1:16:e5:b0:e2:a1:
c8:e5:8c:4a:98:b5:5c:b0:88:47:7d:0f:b0:96:42:
82:92:ac:66:a7:61:fa:9e:60:3e:59:19:b1:fa:a6:
2c:86:09:4f:81:e5:32:50:8d:e6:34:7d:31:e1:2a:
67:73:cc:b3:c3:c3:50:e9:c4:ab:63:eb:39:d5:ce:
b8:f4:4a:59:04:95:af:c8:6c:d4:2e:88:dc:9c:c9:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:10:7D:6B:F1:CC:C8:18:F6:6D:8D:A8:DD:85:EE:92:4A:0C:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.176.0-193.142.187.255
Signature Algorithm: sha256WithRSAEncryption
24:f8:a2:a8:46:ca:6e:d8:1d:03:a7:ac:86:b2:14:bd:b2:38:
01:0a:70:9e:e2:45:a0:5f:87:5d:bc:4a:33:11:35:51:0e:00:
4c:9a:5d:da:67:86:c9:bb:e9:5e:c0:ee:5b:5c:01:f2:d5:81:
45:db:db:4b:15:0e:6b:0c:79:a7:b6:3d:70:c1:e4:26:64:fc:
3f:67:5d:d3:66:90:48:52:66:1a:d4:b2:7e:f1:bf:cb:e2:c6:
96:8e:e5:76:d8:b8:97:38:49:ad:94:3a:dc:91:46:ad:4d:e4:
86:2c:d2:5e:8a:94:06:77:b4:ed:ed:20:f1:90:b7:63:f5:41:
37:3b:7c:25:77:fb:59:36:78:0f:93:7f:c5:db:67:a4:fe:d2:
e3:8d:1a:07:d1:54:63:dd:98:39:3f:d2:d0:69:db:b4:77:f0:
5f:3a:ed:97:87:4e:89:c6:a1:3a:e5:83:dc:1f:9b:61:42:16:
65:41:51:83:c9:7a:ca:75:58:58:0c:ff:8f:75:f5:fa:92:c7:
e6:70:b9:f7:d3:6e:be:4a:33:b2:c8:4d:a1:e1:41:a4:97:82:
90:4a:5c:1c:71:0f:9c:f8:c9:8e:67:a5:01:7d:92:21:ae:d5:
8e:db:7d:d1:c3:ec:16:4a:72:57:2d:5c:be:d4:11:09:d7:a8:
10:ea:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:05:37 2024 by rpki-client on console-ams.rpki-client.org