Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
File: flyFKPgXh8SJxUqZODkmn1prH5Q.cer (raw, json)
Hash identifier: GH1iYEZ79H00YNsoY6NVAFFUaNrF9zVTeFH0ocCrkjM=
Subject key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEEDB0C0A99BC41796946994D98497
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.108.190.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ed:b0:c0:a9:9b:c4:17:96:94:69:94:d9:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:e0:96:f4:89:0c:fe:28:6b:04:d1:5c:8a:
1f:7f:0c:e4:b9:0f:61:1d:e6:a4:aa:4e:11:f8:80:
28:5f:30:7a:84:f4:b1:94:d0:7f:71:c7:49:b0:5a:
45:de:b8:55:c7:6d:01:24:73:38:a8:d0:59:3c:b0:
aa:43:16:b7:b7:59:8a:7c:24:92:00:97:55:3c:1a:
b9:1b:8e:76:4a:c6:7d:a6:ac:eb:0c:c3:cd:61:2c:
f4:a4:f9:3d:3c:f9:a3:13:26:3f:5e:d5:ff:7d:0b:
ed:08:3a:8d:b3:ca:b5:cc:e9:b2:e7:ae:c3:de:04:
f6:7e:7c:14:e0:ae:fb:b4:04:05:42:86:f1:5f:4e:
21:b4:66:18:9e:3f:b0:ce:98:eb:22:3a:9a:b8:ff:
ec:0f:5b:df:a3:c6:0f:69:68:11:b8:e5:34:18:8e:
77:c7:c9:5b:2c:93:68:85:55:cf:ad:79:db:34:f8:
53:53:2b:f9:5b:26:39:91:18:dd:b7:a7:2f:0d:17:
91:82:85:d3:96:c3:2e:94:89:20:bd:34:20:43:2e:
c9:34:6a:02:dc:7d:ae:1d:cb:8b:0c:e9:d7:48:28:
70:43:a7:91:32:9b:22:c3:e3:b1:ed:7b:eb:6d:22:
88:dd:ea:97:97:f4:f8:77:0b:4d:30:a4:ab:3e:77:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:16:c3:5c:2b:c9:3a:26:67:8d:6d:ce:de:c9:ac:7e:02:ea:
b3:54:5a:aa:2f:4e:6d:05:4c:f7:23:f5:b0:af:6b:05:be:be:
f2:64:a4:28:5f:04:6a:52:23:15:64:a8:ba:21:05:af:4b:b7:
02:14:10:cf:56:78:91:52:8e:61:84:48:86:e1:7c:93:31:de:
e2:66:89:f0:fe:76:d3:ef:7e:93:3a:c7:c5:21:83:00:33:8c:
54:1d:04:17:2b:2d:26:2b:85:2c:4d:2c:93:93:67:86:e0:30:
07:90:9a:70:d4:97:77:35:2e:63:27:12:59:40:57:2b:f0:15:
ee:65:a8:93:5d:83:e8:44:8c:b2:78:f6:e7:9d:bb:9d:bb:7a:
fd:b3:cb:20:b0:31:be:62:a1:d7:bb:ae:04:c9:9b:6c:c4:c1:
cd:ed:a5:20:4a:3b:ec:cb:f7:b9:6a:4c:29:29:68:cf:cf:0f:
91:ee:29:c1:8f:2f:38:86:07:13:eb:d6:3b:83:53:87:68:5d:
6a:7f:9b:8d:23:a4:33:08:d7:7c:13:c1:04:1e:44:b5:55:93:
5b:f5:44:71:7c:bc:b3:00:9a:f4:bb:9a:04:6e:a2:a6:a3:08:
e1:87:fe:99:1a:1f:f6:25:10:d6:f8:e9:c5:74:6c:6e:86:31:
0f:25:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:02:06 2024 by rpki-client on console-ams.rpki-client.org