Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer (raw, json)
Hash identifier: Vgtql/dyL+4uZyrfhk08LGnWOPV538yOKTuScz2CheU=
Subject key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B871D606F73B810F7DBA821DC49978
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.154.148.0/22
IP: 2a14:3b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:71:d6:06:f7:3b:81:0f:7d:ba:82:1d:c4:99:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:24:b9:0a:f8:a1:65:ee:be:25:89:75:cb:
c4:8b:67:5e:b0:f6:7c:c1:71:78:14:3e:03:e4:c8:
f5:07:8e:29:cb:44:0e:e0:28:e3:6f:e5:2d:d5:39:
5f:df:a2:db:ed:cd:17:09:2e:25:ad:80:9e:8d:3c:
38:11:96:1c:47:11:85:c6:15:bb:cd:95:f4:ef:d2:
f3:d3:1d:85:7e:ee:77:87:be:9d:0d:e3:46:7f:04:
88:41:2e:2d:b3:db:7e:7a:fa:d6:39:e8:50:f5:ed:
c3:8c:05:77:23:91:9d:e5:af:a7:c3:d3:c9:43:3c:
84:2c:23:4f:17:8b:34:9e:55:28:5e:73:cc:4c:c5:
74:f8:a5:14:8e:8f:18:c7:ee:88:81:e6:91:eb:65:
ee:62:93:f1:ce:29:2f:c9:a1:cd:91:94:e4:0c:99:
7e:99:e5:c2:7b:4a:a8:df:f6:f6:85:29:b8:05:76:
f7:c7:3b:05:47:be:e6:50:be:9f:6c:d0:76:9a:a2:
ae:98:8f:e0:69:47:f2:78:3a:b2:b5:67:a0:81:73:
0d:c3:6b:ea:dd:8d:e4:66:5b:5c:8d:05:03:83:84:
24:24:a2:df:32:33:2d:fc:1e:e0:59:2b:8f:04:36:
53:e4:95:fa:aa:c3:cc:e7:f7:03:31:b2:80:5b:e0:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.148.0/22
IPv6:
2a14:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
12:e8:3d:2a:30:59:73:81:4f:44:1c:93:31:4d:9a:fa:67:a0:
6c:c6:d6:08:f7:d1:5e:e9:d8:4d:61:6d:2b:2b:2f:c4:f1:f0:
91:b7:9f:8d:18:0c:85:60:4d:5a:e4:44:a9:83:01:c5:88:64:
63:d7:c5:ff:e9:fd:b9:9e:de:6c:37:f7:ca:ec:6f:39:d5:d6:
68:53:ce:cc:0d:a9:8d:46:31:d4:dd:20:ce:bd:f5:a4:ef:6e:
48:b6:05:f0:dd:98:f0:0b:f8:ba:c6:88:cb:f9:0e:03:a2:e8:
a7:b7:65:d9:6c:c5:82:2f:6c:e7:da:42:c1:d5:7c:ee:86:2b:
3e:61:1b:00:3b:c8:39:73:2e:dd:98:c9:52:a8:cb:e0:51:18:
dc:8f:e8:89:94:43:d8:b8:1a:9d:1b:f9:1a:2d:98:3b:c9:32:
97:b8:40:73:4d:12:69:7a:01:57:91:fd:38:33:d3:ee:87:94:
66:ec:20:ae:a3:43:ec:2d:c1:f6:c7:99:de:02:51:9a:ca:36:
66:e7:c9:97:c7:9b:c6:04:95:2b:43:ea:c4:9e:03:0c:66:bd:
7d:5b:37:d9:e8:9c:a4:2e:70:a8:0a:71:10:70:0e:ef:21:f6:
10:b9:5b:09:79:97:fd:e1:23:9e:04:14:57:42:13:01:f3:69:
3a:cc:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:46:20 2024 by rpki-client on console-fra.rpki-client.org