Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer (raw, json)
Hash identifier: Pw8GjthOhEFpnxwh9T6sc/aDH+qxAVfhDl88XQ3tjeE=
Subject key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192D83241EE6EAE723804BE6668503CCA46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Oct 2024 12:13:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.172.80.0/22
IP: 2a0b:700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:32:41:ee:6e:ae:72:38:04:be:66:68:50:3c:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 29 12:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:0d:13:76:a0:27:c5:bb:d9:23:83:96:87:
e9:a5:ab:99:1b:2c:87:33:90:99:5c:20:e4:36:66:
47:f1:3f:c8:6d:a7:b9:3b:cf:60:ab:e8:65:0b:51:
c6:4c:2a:85:42:ba:89:f6:3d:42:d5:ab:ba:76:c9:
6b:40:14:95:54:2a:01:96:26:b1:3d:41:f4:af:08:
ed:8a:86:ed:75:02:57:db:f4:bc:2c:2e:f8:90:97:
4d:f3:4a:95:d0:ab:a1:d4:48:5c:a7:e0:1a:6f:77:
f9:19:8d:8a:bf:fe:10:01:bb:32:03:3c:16:7a:98:
06:98:96:36:2b:61:12:28:6c:91:87:d3:3e:01:fe:
e5:47:2a:9c:a3:f6:75:01:43:7a:9f:26:73:34:1d:
dc:41:c5:b8:8a:08:bd:63:77:cd:f5:32:1a:95:cc:
0a:4f:09:a4:4c:8e:df:b7:d5:50:3a:8f:db:70:63:
63:01:b6:e8:71:67:05:f4:36:07:cb:df:8d:10:b0:
d7:32:5b:7b:68:4c:65:2a:4d:1b:04:8e:2d:8a:22:
10:38:c0:2a:fc:56:32:7b:e0:82:bb:27:74:8b:c7:
7c:ac:e0:8e:ad:a7:1d:4c:95:08:cf:e6:69:07:41:
14:63:cb:95:b4:dc:39:3c:de:b9:61:32:96:0b:81:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.80.0/22
IPv6:
2a0b:700::/29
Signature Algorithm: sha256WithRSAEncryption
99:ff:79:ca:55:a4:90:8a:ab:28:ae:7e:56:97:df:bc:59:cf:
ef:d1:04:5c:7b:b4:a2:3f:a2:51:65:fa:17:10:42:f8:10:b3:
55:07:6f:44:34:6a:9a:92:9a:99:b8:17:87:b3:26:86:f5:b2:
4f:c1:e4:a5:0e:1a:0e:f1:8f:67:5e:37:5c:15:97:9c:88:9d:
92:7c:9a:09:c7:6d:0d:fc:36:ec:b5:b2:6a:1a:22:8e:28:5c:
dd:ea:b5:ed:82:e9:e4:c3:df:cb:1c:ba:1b:b5:c3:19:68:fe:
75:12:26:9a:b3:1a:a0:4f:f2:22:f2:7f:36:d8:d2:c3:3a:96:
f4:67:81:af:60:69:b5:83:9f:ad:0c:28:7c:c1:2b:3f:b0:a4:
1f:f4:55:03:6c:48:87:6f:5f:5a:ae:c1:a7:be:f6:3f:96:97:
11:c8:b0:08:c7:fe:7d:c2:44:64:8d:87:96:39:3e:f1:d4:79:
48:0b:04:7e:a2:16:04:a8:6e:07:3c:13:54:d7:07:3c:90:6f:
94:49:9c:b4:af:68:fa:2a:4f:c4:23:d5:4d:8d:c0:d7:5f:3c:
bd:4e:70:88:16:cb:e7:b5:cc:ad:06:54:b9:3d:cc:ac:e7:56:
fb:0e:bc:bb:c1:97:c1:1a:a6:c6:c8:b9:53:30:cf:34:3d:c9:
c5:6c:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:27 2024 by rpki-client on console-ams.rpki-client.org