Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.cer (raw, json)
Hash identifier: KHaLejB1SoQBACTMDZs7pjWzXJOdRaA/RBT8Kgi9E4o=
Subject key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425199BE4FFB29516879F33375E3925
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 78.24.205.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:19:9b:e4:ff:b2:95:16:87:9f:33:37:5e:39:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:2a:62:e7:55:f0:93:ad:96:13:07:36:68:
1f:4d:12:bb:03:04:f9:fc:19:3a:84:40:b5:ab:94:
7b:26:c7:ca:ce:e4:ca:07:be:c3:ab:8b:e3:98:9b:
7e:1d:32:3d:b0:5b:0e:a8:35:65:27:5e:79:50:7b:
00:37:a3:d8:55:a5:61:11:da:28:7d:b1:72:bd:17:
e4:51:ae:e3:01:79:12:62:ba:f8:c1:67:98:8f:46:
69:3b:84:98:92:d2:9a:dd:6c:e2:12:69:47:09:0b:
d6:95:b1:66:f3:48:76:f4:3a:68:b8:ca:6f:9a:61:
ab:9c:9f:ec:1c:00:df:03:8c:94:27:01:1b:fe:5d:
13:8e:24:fe:6a:57:1c:b5:67:2e:f5:cf:0a:bc:b3:
06:e9:c1:b1:db:cb:2a:1c:57:1d:40:a0:04:d3:73:
e7:9d:f9:f0:ae:9e:6f:d4:a6:e4:c4:83:cf:1e:19:
4b:07:33:bb:f5:ed:7a:dc:a3:1b:f9:27:37:29:af:
4d:e8:2c:e3:7e:63:25:b5:bd:dd:5b:91:7d:a4:1c:
c1:1f:ec:5c:46:88:73:f0:56:03:5b:4b:c1:e4:9b:
27:22:fb:e5:a0:ce:31:f4:24:fa:c3:98:21:8d:f0:
f8:c7:29:52:32:3c:ff:be:b0:3e:79:56:03:41:6b:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a7:09:59:cd:31:f0:05:09:a5:d7:97:8f:5b:db:67:90:0f:
3e:c7:b9:45:b3:62:4e:d2:6d:8a:34:c9:d3:07:0f:b9:9a:a3:
88:8d:e2:ba:b9:8e:cb:c1:96:2b:6c:6d:08:92:0b:4e:0f:d8:
15:15:c5:06:c3:a0:21:0f:9b:ee:ff:8a:12:04:bc:b2:aa:4c:
9e:ab:a5:43:21:99:e8:48:a7:2f:95:17:cc:98:d2:0f:b3:c6:
fb:40:4d:81:4d:17:bd:ff:0a:38:0b:31:da:8c:9f:f4:db:97:
15:c6:9a:64:19:c1:54:eb:7f:b2:1f:e1:46:ed:ba:6b:64:6c:
69:cd:16:2f:c4:04:67:3f:9c:dd:de:d0:08:41:ac:7b:30:ec:
97:22:86:e1:8d:88:9b:bf:31:31:0c:35:e9:e4:39:00:2c:f0:
78:d9:67:f1:78:49:83:4b:ef:1c:4b:8a:66:5b:f4:31:47:ce:
21:ea:e4:cf:a9:45:2d:03:b1:40:26:06:2d:ec:e1:40:02:11:
e2:b1:6c:e5:f7:95:68:73:a1:01:df:3b:6f:68:b9:43:bd:f5:
c4:75:04:3f:d1:1e:6d:ad:2c:60:af:02:41:58:cf:d2:f6:c3:
51:e5:6a:b3:b2:a0:26:c8:cc:98:6f:dd:38:9d:f4:5b:fd:20:
b3:0f:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:27 2024 by rpki-client on console-fra.rpki-client.org