Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.cer (raw, json)
Hash identifier: 7NxU1W/l1wDhfj0yNhPdjgKIrnxwextoyv8NFt8heXk=
Subject key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01925123A3E5E59D8C97A30E620EEDAAC7AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Oct 2024 06:49:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.233.142.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:23:a3:e5:e5:9d:8c:97:a3:0e:62:0e:ed:aa:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 06:49:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:05:3c:0a:88:06:3a:b8:94:c9:87:c9:89:
7a:1e:ab:25:ca:89:c4:8d:94:01:15:fb:6f:4b:b3:
8c:2d:02:e3:60:c0:3b:bf:84:13:de:8b:80:8d:35:
d0:bc:ac:20:f8:48:76:2d:17:f4:2a:90:72:28:75:
de:75:77:98:c4:b4:4d:0c:cf:ab:f1:05:91:dd:2c:
30:f9:d3:6c:71:23:f8:3d:30:9e:5a:c1:b7:a8:86:
47:99:d0:66:47:af:86:fb:f7:7d:7c:df:bf:4e:62:
7b:d3:0e:60:d0:bf:a2:56:94:3f:89:6c:4b:2e:63:
28:26:d0:5d:0d:a9:54:38:81:7b:e5:5e:8c:13:5b:
9f:e0:77:fe:25:a6:a8:3c:92:2f:33:bd:62:e8:21:
28:d0:d4:e7:fe:ed:61:f6:08:eb:41:6e:b0:89:55:
3a:eb:09:8a:29:29:a8:2d:7c:42:0b:f1:e2:2f:c8:
38:21:e0:47:25:85:d4:7b:ae:c8:a0:03:02:a6:ed:
1b:f5:aa:66:bf:5a:83:9f:69:ae:17:90:2f:fc:64:
90:50:67:db:fc:c5:57:be:53:54:d5:b9:e8:71:c5:
91:bf:41:ae:f3:db:38:b6:66:85:dc:29:14:c7:8b:
53:2b:84:fb:68:b2:9e:39:a7:84:68:68:8e:55:ab:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.142.0/23
Signature Algorithm: sha256WithRSAEncryption
11:33:05:19:e7:e9:61:8f:ef:7a:3b:8c:32:3d:ff:0f:51:81:
9b:e8:ab:83:4f:1c:df:fe:08:7a:1b:4a:3a:04:a7:08:22:a9:
b9:5e:2d:85:cc:f8:77:4d:73:1c:21:98:ec:af:f9:92:61:4e:
4d:20:6e:59:4c:6e:67:b6:70:f2:1e:45:2b:23:7f:7b:02:5a:
24:c2:de:51:30:60:5a:cf:7e:d9:8b:98:52:eb:f8:15:7c:62:
fd:5f:42:cf:0e:e7:1a:c0:e0:60:f9:76:c9:20:c3:ff:45:da:
de:37:12:c3:fb:54:5a:46:aa:e7:b4:f0:95:a8:6b:51:f7:e1:
d8:c6:49:c2:78:5b:1d:6f:32:fe:e2:e4:9c:11:ac:86:fb:e3:
32:8c:03:6f:fb:41:86:14:3a:2d:a2:e8:93:7a:f6:d9:38:7e:
3e:8b:67:1b:74:88:b7:6f:62:ce:59:86:dc:13:a1:48:fc:50:
9a:93:90:8b:3a:b9:50:63:d0:80:b5:5b:d5:22:f4:de:f7:55:
a7:79:13:e9:a0:cb:ef:53:8d:4f:77:ae:10:ca:05:7e:4f:6e:
81:78:65:26:05:d9:fa:62:7b:7a:68:11:c6:a5:b3:75:c5:18:
c1:f9:2d:00:6e:5d:c4:f9:e7:e4:f0:5a:97:ce:63:a0:d4:74:
4d:fe:93:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:29 2024 by rpki-client on console-ams.rpki-client.org